Evaluate live keyboard sources safely

pyanaconda/modules/localization/live_keyboard.py

@@ -16,6 +16,7 @@
 #
 
 from abc import ABC, abstractmethod
+import ast
 from pyanaconda.core.util import execWithCaptureAsLiveUser
 from pyanaconda.core.configuration.anaconda import conf
 
@@ -81,8 +82,8 @@ def _convert_to_xkb_format(self, sources):
         # convert input "[('xkb', 'us'), ('xkb', 'cz+qwerty')]\n"
         # to a python list of '["us", "cz (qwerty)"]'
         try:
-            sources = eval(sources.rstrip())
-        except SyntaxError:
+            sources = ast.literal_eval(sources.rstrip())
+        except (SyntaxError, ValueError, TypeError):
             log.error("Gnome Shell keyboard configuration can't be obtained from source %s!",
                       sources)
             return []