• Trailblazing Braille Taser
    link
    fedilink
    84 days ago

    Given the warning about capitalization, the best possible case is that they’re using ast.literal_eval() rather than throwing untrusted input into eval().

    Err, I guess they might be comparing strings to ‘True’ and are choosing to be really strict about capitalization for some reason.