Nils <[EMAIL PROTECTED]> wrote:

> why not:
>>>> for i in eval('(1,2,3)'):
> ...     print i
> 1
> 2
> 3
> 

For the exact same reason Steven already gave you: one day someone will 
give you bad data.

For eval you need to use slightly more complicated expressions. e.g. 
"__import__('os').system('rm # -rf /')"
will be sufficient to mess you up.

-- 
http://mail.python.org/mailman/listinfo/python-list

Reply via email to