rest_router: fix security problem

Signed-off-by: Takeshi <[email protected]>
Signed-off-by: FUJITA Tomonori <[email protected]>

ryu/app/rest_router.py

@@ -410,7 +410,7 @@ def delete_vlan_data(self, req, switch_id, vlan_id, **_kwargs):
     def _access_router(self, switch_id, vlan_id, func, rest_param):
         rest_message = []
         routers = self._get_router(switch_id)
-        param = eval(rest_param) if rest_param else {}
+        param = json.loads(rest_param) if rest_param else {}
         for router in routers.values():
             function = getattr(router, func)
             data = function(vlan_id, param, self.waiters)