Closed saltzberg closed 1 year ago
It's also horribly insecure, since an evil person could put arbitrary Python code in a stat file.
This should be more secure since we use ast.literal_eval
instead of plain eval
now. Long term, stats should be stored in the RMF file anyway.
Reading stat files using eval() is very slow. Rewriting this with standard string parsers should speed this up by a fewfold.