fix: Use frappe.safe_eval instead of eval

2021-05-11 10:59:16 +05:30 · 2021-05-11 10:59:16 +05:30 · b76ebb3f4b
commit b76ebb3f4b
parent 042118aafd
1 changed files with 1 additions and 1 deletions
--- a/erpnext/setup/doctype/email_digest/email_digest.py
+++ b/erpnext/setup/doctype/email_digest/email_digest.py
@ -249,7 +249,7 @@ class EmailDigest(Document):
 				card = cache.get(cache_key)

 				if card:
-					card = eval(card)
+					card = frappe.safe_eval(card)

 				else:
 					card = frappe._dict(getattr(self, "get_" + key)())