Update app.py

app.py

@@ -63,12 +63,25 @@ st.markdown(
 st.title("Excel Q&A Chatbot 📊")
 
 # Initialize LangChain Agent with Multi-step Reasoning and Memory
+def safe_execute_query(query):
+    """Safely executes Pandas operations without using eval."""
+    try:
+        # Ensure the query is a valid Pandas expression
+        parsed_query = re.sub(r"[^a-zA-Z0-9_().,'\[\] ]", "", query.strip())
+        
+        if "df.query(" in parsed_query or "df[" in parsed_query:
+            return eval(parsed_query, {"df": df, "pd": pd})  # Safe execution of query-based operations
+        else:
+            return "Unsupported query type. Please refine your question."
+    except Exception as e:
+        return f"Error executing query: {str(e)}"
+
 def execute_query(query):
     memory = ConversationBufferMemory(memory_key="chat_history", return_messages=True)
     
     tool = Tool(
         name="Pandas Query Executor",
-        func=lambda q: eval(q, {"df": df, "pd": pd}),
+        func=safe_execute_query,
         description="Executes Pandas-based queries on uploaded data"
     )