From 8f69bf7fc9ef970bc65d43ef8ef7639912deb90f Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?C=C3=A9dric=20Krier?= Date: Tue, 31 Aug 2010 19:11:48 +0200 Subject: [PATCH] Use safe_eval instead of eval for issue1640 --- product.py | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/product.py b/product.py index 5cadaa2f9a..a375b39997 100644 --- a/product.py +++ b/product.py @@ -6,6 +6,7 @@ from trytond.model import ModelView, ModelSQL, fields from trytond.wizard import Wizard from trytond.pyson import PYSONEncoder from trytond.transaction import Transaction +from trytond.tools import safe_eval class Template(ModelSQL, ModelView): @@ -103,7 +104,7 @@ class Product(ModelSQL, ModelView): return False if operator == "=": operator= "==" - return (eval(str(value) + operator + str(operand))) + return (safe_eval(str(value) + operator + str(operand))) def search_quantity(self, name, domain=None): date_obj = self.pool.get('ir.date')