From 4782e8b7516bbb7577ef060d105a3b16e03bd5c2 Mon Sep 17 00:00:00 2001 From: Makarand Bauskar Date: Fri, 7 Apr 2017 06:46:16 -0500 Subject: [PATCH] [minor] added safe_eval for status_updater and added getdate and nowdate (#8365) --- erpnext/controllers/status_updater.py | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/erpnext/controllers/status_updater.py b/erpnext/controllers/status_updater.py index f3019bf4d94..d58ba4b8411 100644 --- a/erpnext/controllers/status_updater.py +++ b/erpnext/controllers/status_updater.py @@ -3,7 +3,7 @@ from __future__ import unicode_literals import frappe -from frappe.utils import flt, comma_or +from frappe.utils import flt, comma_or, nowdate, getdate from frappe import _ from frappe.model.document import Document @@ -119,7 +119,7 @@ class StatusUpdater(Document): self.status = s[0] break elif s[1].startswith("eval:"): - if eval(s[1][5:]): + if frappe.safe_eval(s[1][5:], None, { "self": self.as_dict(), "getdate": getdate, "nowdate": nowdate }): self.status = s[0] break elif getattr(self, s[1])():