Skip to content

Literal Eval to Eval (Algorand)#4885

Open
mdulin2 wants to merge 1 commit into
wormhole-foundation:mainfrom
mdulin2:remove-eval-algorand
Open

Literal Eval to Eval (Algorand)#4885
mdulin2 wants to merge 1 commit into
wormhole-foundation:mainfrom
mdulin2:remove-eval-algorand

Conversation

@mdulin2

@mdulin2 mdulin2 commented Jun 29, 2026

Copy link
Copy Markdown
Contributor

The Python eval() is a known bad sink for code execution bugs. Although there's no security impact with this currently, we're proactively changing the eval() to literal_eval() to prevent this from ever becoming an issue.

@johnsaigle
johnsaigle force-pushed the remove-eval-algorand branch from 8e7a06f to 06de448 Compare July 3, 2026 10:53
@johnsaigle
johnsaigle force-pushed the remove-eval-algorand branch from 06de448 to 385d0a7 Compare July 17, 2026 15:34
@mdulin2

mdulin2 commented Jul 20, 2026

Copy link
Copy Markdown
Contributor Author

The Sui build process seems to be broken. This only touched the Algorand tests, so I hope we can just ignore that test failure and merge this.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants