🐛 Added regex validation for eval()

dyvenia · Nov 6, 2024 · 90731a1 · 90731a1
1 parent 8eb2b13
commit 90731a1
Showing 1 changed file with 4 additions and 2 deletions.
diff --git a/src/viadot/orchestration/prefect/utils.py b/src/viadot/orchestration/prefect/utils.py
@@ -429,8 +429,10 @@ def _process_string(self, text: str) -> list[str] | str:
 
             if match_no_symbols in self.replacements:
                 replacement = self.replacements[match_no_symbols]
-            if not replacement:
-                replacement = eval(match_no_symbols)
+            if not replacement and bool(
+                re.match(r"^\s*pendulum\.\w+\(.*\)\s*$", match_no_symbols)
+            ):
+                replacement = eval(match_no_symbols)  # noqa: S307
             text = text.replace(
                 match,
                 (