Skip to content

Disable pyimport by default, for security #45

@carsonyl

Description

@carsonyl

I'm exploring the use of this library for a project I'm working on, and it looks amazing. I am interested in using this library to parse and execute functions from potentially untrusted JavaScript files, so I am concerned by the availability of the pyimport keyword. Is it possible to add an option to enable/disable this feature, and have it disabled by default?

Doing this would make the default behaviour of Js2Py much safer and similar to standard JavaScript.

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions