compile_restricted_function

[zedzhen]

The documentation states that body is "str or unicode text" (in python3, this is apparently str, bytes or bytearray). You can add support for ast.Module without additional code. And by adding a small ast code.Expression and ast.Interactive.

[dataflake]

I understand the Python2/Python3 fixes regarding the type of string, but what exactly is the goal of allowing these other types? I am worried that adding features "just because it's easy" will only increase the attack surface.

[zedzhen]

@dataflake Adding types for consistency of functions (if we accept #324, it will be more important). This puts out the ast.parse call, which does not check the security of the code. And the application of restrictions does not change (_compile_restricted_mode is always called) (so there is no impact on security).