Avoid using eval, use getattr instead

benoitc · May 20, 2019 · 225a0b6 · 225a0b6
1 parent 9b5c1f9
commit 225a0b6
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/gunicorn/util.py b/gunicorn/util.py
@@ -374,8 +374,8 @@ def import_app(module):
 
     is_debug = logging.root.level == logging.DEBUG
     try:
-        app = eval(obj, vars(mod))
-    except NameError:
+        app = getattr(mod, obj)
+    except AttributeError:
         if is_debug:
             traceback.print_exception(*sys.exc_info())
         raise AppImportError("Failed to find application object %r in %r" % (obj, module))