mirror of
https://github.com/OCA/account-reconcile.git
synced 2025-01-20 12:27:39 +02:00
[FIX] replace eval() by safe_eval()
This commit is contained in:
@@ -20,6 +20,7 @@
|
||||
##############################################################################
|
||||
|
||||
from openerp.osv import fields, orm
|
||||
from openerp.tools.safe_eval import safe_eval
|
||||
from operator import itemgetter, attrgetter
|
||||
|
||||
|
||||
@@ -106,7 +107,7 @@ class EasyReconcileBase(orm.AbstractModel):
|
||||
params = []
|
||||
if rec.filter:
|
||||
dummy, where, params = ml_obj._where_calc(
|
||||
cr, uid, eval(rec.filter), context=context).get_sql()
|
||||
cr, uid, safe_eval(rec.filter), context=context).get_sql()
|
||||
if where:
|
||||
where = " AND %s" % where
|
||||
return where, params
|
||||
|
||||
Reference in New Issue
Block a user