From cef9c45f68c2e69ad9c44abc284fef934a354b02 Mon Sep 17 00:00:00 2001 From: Matthias Date: Sat, 8 Jun 2024 09:31:50 +0200 Subject: [PATCH] don't use plain eval --- freqtrade/configuration/configuration.py | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/freqtrade/configuration/configuration.py b/freqtrade/configuration/configuration.py index cc8b5407e..184f9decf 100644 --- a/freqtrade/configuration/configuration.py +++ b/freqtrade/configuration/configuration.py @@ -2,6 +2,7 @@ This module contains the configuration class """ +import ast import logging import warnings from copy import deepcopy @@ -301,7 +302,7 @@ class Configuration: # Edge section: if "stoploss_range" in self.args and self.args["stoploss_range"]: - txt_range = eval(self.args["stoploss_range"]) + txt_range = ast.literal_eval(self.args["stoploss_range"]) config["edge"].update({"stoploss_range_min": txt_range[0]}) config["edge"].update({"stoploss_range_max": txt_range[1]}) config["edge"].update({"stoploss_range_step": txt_range[2]})