Path: csiph.com!x330-a1.tempe.blueboxinc.net!usenet.pasdenom.info!weretis.net!feeder4.news.weretis.net!feeder2.ecngs.de!ecngs!feeder.ecngs.de!xlned.com!feeder5.xlned.com!newsfeed.xs4all.nl!newsfeed5.news.xs4all.nl!xs4all!post.news.xs4all.nl!not-for-mail
Return-Path: <python-python-list@m.gmane.org>
X-Original-To: python-list@python.org
Delivered-To: python-list@mail.python.org
X-Spam-Status: OK 0.000
X-Spam-Evidence: '*H*': 1.00; '*S*': 0.00; 'system;': 0.07; 'terry': 0.07; 'python': 0.08; 'none.': 0.09; 'received:80.91': 0.09; 'received:80.91.229': 0.09; 'received:80.91.229.12': 0.09; 'received:gmane.org': 0.09; 'received:list': 0.09; 'received:lo.gmane.org': 0.09; 'subject:string': 0.09; 'am,': 0.12; 'skip:[ 20': 0.12; '"from': 0.16; 'eval': 0.16; 'expression.': 0.16; 'received:dip.t-dialin.net': 0.16; 'received:t-dialin.net': 0.16; 'reedy': 0.16; 'tuples,': 0.16; 'wrote:': 0.18; '>>>': 0.18; 'convert': 0.19; 'subject:list': 0.21; 'from:addr:web.de': 0.23; 'literal': 0.23; 'string': 0.24; 'command': 0.24; 'consist': 0.24; 'import': 0.27; 'replaced': 0.29; 'letting': 0.30; 'strings,': 0.30; 'list': 0.32; 'header:X -Complaints-To:1': 0.33; 'to:addr:python-list': 0.34; 'safely': 0.34; 'something': 0.35; 'lists,': 0.35; 'window': 0.35; 'subject:How': 0.35; 'operating': 0.35; 'keyboard': 0.37; 'but': 0.37; 'problems': 0.37; 'easiest': 0.38; 'received:org': 0.38; 'to:addr:python.org': 0.40; 'your': 0.61; 'provided': 0.62; 'dangerous': 0.64; 'evaluate': 0.71; ',and': 0.84; 'node': 0.84
X-Injected-Via-Gmane: http://gmane.org/
To: python-list@python.org
From: Peter Otten <__peter__@web.de>
Subject: Re: How convert a list string to a real list
Date: Wed, 30 Nov 2011 09:58:08 +0100
Organization: None
References: <CAHbqn4jog2CzT+ahL3XwPZwvAr8eKN3qHsp2yaJk1VYa1157JQ@mail.gmail.com> <jb4jv2$4nt$1@dough.gmane.org>
Mime-Version: 1.0
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: 8Bit
X-Gmane-NNTP-Posting-Host: p5084a4cc.dip.t-dialin.net
X-BeenThere: python-list@python.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: General discussion list for the Python programming language <python-list.python.org>
List-Unsubscribe: <http://mail.python.org/mailman/options/python-list>, <mailto:python-list-request@python.org?subject=unsubscribe>
List-Archive: <http://mail.python.org/pipermail/python-list>
List-Post: <mailto:python-list@python.org>
List-Help: <mailto:python-list-request@python.org?subject=help>
List-Subscribe: <http://mail.python.org/mailman/listinfo/python-list>, <mailto:python-list-request@python.org?subject=subscribe>
Newsgroups: comp.lang.python
Message-ID: <mailman.3148.1322643495.27778.python-list@python.org>
Lines: 28
NNTP-Posting-Host: 2001:888:2000:d::a6
X-Trace: 1322643495 news.xs4all.nl 6861 [2001:888:2000:d::a6]:37747
X-Complaints-To: abuse@xs4all.nl
Xref: x330-a1.tempe.blueboxinc.net comp.lang.python:16422

Terry Reedy wrote:

> On 11/30/2011 1:20 AM, 郭军权 wrote:
>> Good after
>> I have a string liststr = '["aaaa","bbbb","ccc"]' ,and I need convert it
>> to a list like list = ["aaaa","bbbb","ccc"],what can id do?
> 
> The easiest -- and most dangerous -- way is
>  >>> eval('["aaaa","bbbb","ccc"]')
> ['aaaa', 'bbbb', 'ccc']
> 
> But DO NOT eval unexamined strings from untrusted sources. The reason is
> that it is much the same as letting an untrusted person sit unsupervised
> as the keyboard of your computer with a command window open. You would
> not want to eval
>    "from os import system; system('<command to delete files>')"
> where '<command...>' is replaced by something obnoxious for your
> operating system.

You can avoid these problems with ast.literal_eval():

literal_eval(node_or_string)
    Safely evaluate an expression node or a string containing a Python
    expression.  The string or node provided may only consist of the
    following Python literal structures: strings, numbers, tuples, lists,
    dicts, booleans, and None.