areski/python-nvd3 — pull request #73 by oz123 (2014-08-04 20:18:35+00:00)
Title: Templates clean

Hi Areski!

As promised some clean ups of the templates.
Plus, I found out, to my horror, a call to ```eval```. I replaced it with something less harmful.

To explain:

When you run ```eval``` as root, this is really dangerous. Think about someone manipulating your code, for some reason. The following lines I removed:

if line.startswith('__version__'):
return eval(line.split('=')[-1])

This can execute: ```rm -rf /``` or something else .... like this:

__version__ = 'os.system(''sh harmful.sh")'

Now, we can document how to add more templates easily! And further improve test coverage.

Cheers,
Oz