X-Git-Url: https://mudpy.org/gitweb?p=mudpy.git;a=blobdiff_plain;f=mudpy%2Fcommand.py;h=bd473e56c536df17fea3595d17644b3cf7cc534f;hp=ea779399ce0a4943c194ebe065eec8cdeae237a2;hb=6841e0ca1d916a31178ceab9bb7802f7a055bd52;hpb=29041014a531835bf9b6a80ca9d7ed414a929432 diff --git a/mudpy/command.py b/mudpy/command.py index ea77939..bd473e5 100644 --- a/mudpy/command.py +++ b/mudpy/command.py @@ -1,6 +1,6 @@ """User command functions for the mudpy engine.""" -# Copyright (c) 2004-2019 mudpy authors. Permission to use, copy, +# Copyright (c) 2004-2020 mudpy authors. Permission to use, copy, # modify, and distribute this software is granted under terms # provided in the LICENSE file distributed with this software. @@ -115,7 +115,7 @@ def error(actor, input_data): """Generic error for an unrecognized command word.""" # 90% of the time use a generic error - # Whitelist the random.randrange() call in bandit since it's not used for + # Allow the random.randrange() call in bandit since it's not used for # security/cryptographic purposes if random.randrange(10): # nosec message = '''I'm not sure what "''' + input_data + '''" means...''' @@ -555,7 +555,7 @@ def show(actor, parameters): try: # there is no other option than to use eval() for this, since # its purpose is to evaluate arbitrary expressions, so do what - # we can to secure it and whitelist it for bandit analysis + # we can to secure it and allow it for bandit analysis message = repr(eval( # nosec " ".join(arguments[1:]), {"mudpy": mudpy, "universe": actor.universe}))