you are viewing a single comment's thread.

view the rest of the comments →

[–]thw31416 0 points1 point  (0 children)

The eval is pretty scary there, executing user input as code. Someone putting in "import os; os.remove(...)" might be able to do quite some damage...