Improper Neutralization of Directives in Dynamically Evaluated Code ('Eval Injection')

Question

Why am I receiving an eval injection error?

 if len(sys.argv) > 1:
   eval(sys.argv[1])(logger, *sys.argv[2:])

Answer 1

Use ast.literal_eval instead of eval.

Code:

from ast import literal_eval as eval
if len(sys.argv) > 1:
     eval(sys.argv[1])(logger, *sys.argv[2:])

Eval is dangerous