Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

PatchWork AutoFix #1023

Open
wants to merge 3 commits into
base: o1-support-with-structured-output
Choose a base branch
from

Conversation

patched-admin
Copy link
Contributor

@patched-admin patched-admin commented Nov 15, 2024

This pull request from patched fixes 3 issues.


  • File changed: patchwork/common/utils/step_typing.py
    Implement a whitelist for importlib.import_module call to prevent arbitrary code execution. Added a whitelist to ensure that only trusted module imports are allowed when using importlib.import_module.
  • File changed: patchwork/app.py
    Implement whitelist check for safe dynamic import in find_patchflow function. Added a whitelist to validate module paths before importing to prevent the execution of untrusted code.
  • File changed: patchwork/common/utils/dependency.py
    Implement whitelist for dynamic import to prevent loading of arbitrary code. Added a whitelist check for the module names before importing them using importlib.import_module() to ensure only trusted modules specified in __DEPENDENCY_GROUPS are imported.

@github-actions github-actions bot force-pushed the autofix-o1-support-with-structured-output branch from baf3906 to cc42f04 Compare November 15, 2024 06:59
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant