AI/ragflow
1
0
Fork 0
mirror of https://git.mirrors.martin98.com/https://github.com/infiniflow/ragflow.git synced 2025-08-15 00:45:57 +08:00
Code Issues Packages Projects Releases Wiki Activity

Remove use of eval() from ocr.py (#4481)

Browse Source 
`eval(op_name)` -> `getattr(operators, op_name)`

### What problem does this PR solve?

Using `eval()` can lead to code injections and is entirely unnecessary
here.

### Type of change

- [x] Other (please describe):

Best practice code improvement, preventing the possibility of code
injection.
This commit is contained in:
Mathias Panzenböck 2025-01-20 02:52:30 +01:00 committed by GitHub
parent 938492cbae
commit 4f9f9405b8
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194
1 changed files with 2 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
deepdoc/vision/ocr.py
View File

@ -19,6 +19,7 @@ from huggingface_hub import snapshot_download
from api.utils.file_utils import get_project_base_directory from api.utils.file_utils import get_project_base_directory
from .operators import * # noqa: F403 from .operators import * # noqa: F403
from . import operators
import math import math
import numpy as np import numpy as np
import cv2 import cv2
@ -55,7 +56,7 @@ def create_operators(op_param_list, global_config=None):
param = {} if operator[op_name] is None else operator[op_name] param = {} if operator[op_name] is None else operator[op_name]
if global_config is not None: if global_config is not None:
param.update(global_config) param.update(global_config)
op = eval(op_name)(**param) op = getattr(operators, op_name)(**param)
ops.append(op) ops.append(op)
return ops return ops