Use safe_eval vs eval.

lib/ansible/runner/lookup_plugins/items.py

@@ -15,6 +15,8 @@
 # You should have received a copy of the GNU General Public License
 # along with Ansible.  If not, see <http://www.gnu.org/licenses/>.
 
+from ansible.utils import safe_eval
+
 def flatten(terms):
     ret = []
     for term in terms:
@@ -34,7 +36,7 @@ class LookupModule(object):
             if '{' or '[' in terms:
                 # Jinja2-ified list needs to be converted back to a real type
                 # TODO: something a bit less heavy than eval
-                terms = eval(terms)
+                terms = safe_eval(terms)
             terms = [ terms ]
         return flatten(terms)