royalnet/royalpack/commands/eval.py

from typing import *
import royalnet.commands as rc
import royalnet.backpack.tables as rbt


class EvalCommand(rc.Command):
    # oh god if there is a security vulnerability
    name: str = "eval"

    description: str = "Esegui una espressione Python... se sei Steffo."

    syntax: str = "{espressione}"

    async def run(self, args: rc.CommandArgs, data: rc.CommandData) -> None:
        async with data.session_acm() as session:
            user: rbt.User = await data.find_author(session=session, required=True)
            if "admin" not in user.roles:
                raise rc.CommandError("Non sei autorizzato a eseguire codice arbitrario!\n"
                                      "(Sarebbe un po' pericoloso se te lo lasciassi eseguire, non trovi?)")
        try:
            result = eval(args.joined(require_at_least=1))
        except Exception as e:
            raise rc.CommandError(f"Eval fallito: {e}")
        await data.reply(repr(result))