nanohttp

nanohttp copied to clipboard

Code execution when loading the configuration

1

Hello, When conducting a security audit of the source code that includes nanohttp I noticed that there is an `exec` done when loading the settings e.g. https://github.com/Carrene/nanohttp/blob/master/nanohttp/cli/entry.py#L73 : `exec(f'settings.{key} =...

RootLUG

```python class Root(RestController): @action def import(self): .... ``` Causes `SyntaxError`

farzaneka

@pylover in #126, you mean when `_handle_exception` hook called, no hook should call after that. but by referring in our code: https://github.com/Carrene/nanohttp/blob/7c536c1667c3151453c34cb7e84a12e509995144/nanohttp/application.py#L47-L74 we called `end_response` in wrong place and should...

meyt