Merge pull request #244 from gurneyalex/7.0-unsafe-eval

[REF] account_banking: replace eval() with getattr()
This commit is contained in:
Stéphane Bidoul (ACSONE)
2016-02-25 18:27:17 +01:00

View File

@@ -333,9 +333,9 @@ class banking_import(orm.TransientModel):
for attr in transaction.__slots__ + ['type']:
if attr in import_transaction_obj.column_map:
values[import_transaction_obj.column_map[attr]] = \
eval('transaction.%s' % attr)
getattr(transaction, attr)
elif attr in import_transaction_obj._columns:
values[attr] = eval('transaction.%s' % attr)
values[attr] = getattr(transaction, attr)
values['statement_id'] = statement_id
values['bank_country_code'] = bank_country_code
values['local_account'] = statement.local_account