search

IDEMSInternational / rapidpro-flow-toolkit

Toolkit for using spreadsheets to create and modify RapidPro flows
GNU Lesser General Public License v2.1
3 stars 1 forks source link

Fix eval security risk #68

Open geoo89 opened 1 year ago

geoo89 commented 1 year ago

This commit adds an eval filter to Jinja2, which calls Python eval: https://github.com/IDEMSInternational/rapidpro-flow-toolkit/commit/2b8f90faa4b2314864e51dd78a990516cd538a4d

Find a way of only using this to evaluate strings as variables from the context...

geoo89 commented 7 months ago

Data sheet filtering and sorting now also makes use of eval: https://github.com/IDEMSInternational/rapidpro-flow-toolkit/pull/112