fix: Use frappe.safe_eval instead of eval

2026-02-16 08:05:00 +00:00 · 2021-05-11 10:59:16 +05:30
parent 77f2686142
commit 113a6f3d80
1 changed files with 1 additions and 1 deletions
--- a/erpnext/setup/doctype/email_digest/email_digest.py
+++ b/erpnext/setup/doctype/email_digest/email_digest.py
@@ -249,7 +249,7 @@ class EmailDigest(Document):
 				card = cache.get(cache_key)

 				if card:
-					card = eval(card)
+					card = frappe.safe_eval(card)

 				else:
 					card = frappe._dict(getattr(self, "get_" + key)())