Code Smell 245 - exec() and eval()

A great door for hackers

TL;DR: Don't use metaprogramming. It is not that cool

• Security




• Limited Control

1. Use direct calls




2. Wrap the execution in a primitive and controlled command




3. Sanitize it

Developers employ the eval() and exec() functions to evaluate arbitrary expressions from strings.

They can be a powerful tool in certain contexts but come with several risks and problems, especially when used with untrusted input or where the code's behavior is not fully controlled or understood. …

beginners can code command context control developers don door expressions functions great hackers problems programming python security solutions strings tool webdev