Removed eval, fixed security vulnerability

cmd_chat/client/client.py

@@ -1,4 +1,5 @@
 import os 
+import ast 
 import time
 import platform
 import threading
@@ -115,7 +116,7 @@ class Client(RSAService):
         while True:
             try:
                 time.sleep(0.05)
-                response = eval(ws.recv())
+                response = ast.literal_eval(ws.recv().decode('utf-8'))
                 if last_try == response:
                     continue
                 last_try = response

cmd_chat/server/services.py

@@ -1,3 +1,4 @@
+import ast
 from sanic import Websocket
 from cmd_chat.server.models import Message
 
@@ -5,7 +6,8 @@ from cmd_chat.server.models import Message
 async def _get_bytes_and_serialize(
     ws: Websocket
 ) -> dict:
-    return eval(await ws.recv())
+    ws_data = await ws.recv()
+    return ast.literal_eval(ws_data.decode('utf-8'))
 
 
 async def _check_ws_for_close_status(