numexpr malicious attack safety

Asked Jul 23 '13 at 07:24

Active Dec 09 '13 at 19:14

Viewed 358 times

Is numexpr safe again malicious attack?

I'm considering using it in a web application, to evaluate user input text.

I've also considered using PLY, ASTEVAL and Pyparsing.

edited Dec 09 '13 at 19:14

PeeHaa

asked Jul 23 '13 at 07:24

user744629

I am also very curious about [numexpr](https://code.google.com/p/numexpr/) and [asteval](http://newville.github.io/asteval/)? Hasn't anyone an opinion or experience about these packages? There's no end to the [eval is dangerous](http://nedbatchelder.com/blog/201206/eval_really_is_dangerous.html) talk. [SymPy](http://docs.sympy.org/dev/index.html) may also be susceptible to malicious attack. – Mark Mikofski Aug 07 '13 at 03:18

0 Answers0