[minor] added safe_eval for status_updater and added getdate and nowdate (#8365)
diff --git a/erpnext/controllers/status_updater.py b/erpnext/controllers/status_updater.py
index f3019bf..d58ba4b 100644
--- a/erpnext/controllers/status_updater.py
+++ b/erpnext/controllers/status_updater.py
@@ -3,7 +3,7 @@
from __future__ import unicode_literals
import frappe
-from frappe.utils import flt, comma_or
+from frappe.utils import flt, comma_or, nowdate, getdate
from frappe import _
from frappe.model.document import Document
@@ -119,7 +119,7 @@
self.status = s[0]
break
elif s[1].startswith("eval:"):
- if eval(s[1][5:]):
+ if frappe.safe_eval(s[1][5:], None, { "self": self.as_dict(), "getdate": getdate, "nowdate": nowdate }):
self.status = s[0]
break
elif getattr(self, s[1])():