• Given the warning about capitalization, the best possible case is that they’re using ast.literal_eval() rather than throwing untrusted input into eval().

    Err, I guess they might be comparing strings to ‘True’ and are choosing to be really strict about capitalization for some reason.

    • MajorHavoc
      link
      fedilink
      arrow-up
      11
      ·
      2 days ago

      Yeah. Maybe .to_lower() is really expensive in their environment, lol.