Merge pull request #187 from Programmer-RD-AI/deepsource-fix-103a4d86

Replace `eval` with `ast.literal_eval`

Author: prdai

WEB/routes/admin.py

@@ -1,3 +1,4 @@
+import ast
 from WEB import *
 from WEB.help_funcs import *
 
@@ -91,7 +92,7 @@ def admin_courses_post():
         for key, val in zip(request_forms.keys(), request_forms.values()):
             new_request_forms += key
             new_request_forms += val
-        request_forms = eval(new_request_forms)
+        request_forms = ast.literal_eval(new_request_forms)
         whole_content = request_forms["whole_content"]
         whole_content = BeautifulSoup(whole_content, "html.parser")
         info = request_forms["info"]
@@ -257,7 +258,7 @@ def admin_question_post():
     Return: return_description
     """
     flash("Question Added", "success")
-    request_form = eval(
+    request_form = ast.literal_eval(
         list(dict(request.form).keys())[0] +
         list(dict(request.form).values())[0])
     info = request_form["info"]

WEB/routes/dashboard.py

@@ -1,3 +1,4 @@
+import ast
 from WEB import *
 from WEB.help_funcs import *
 
@@ -74,7 +75,7 @@ def usr_home_cources(_id, course_id):
                 "file_name": info
             },
         ).json()["message"]
-        info = dict(eval(info))
+        info = dict(ast.literal_eval(info))
         session[f"Cource {course_id}"] = info
         next_lesson = list(info.keys())[0]
         # TODO check if length of cource is higher than 1