Marius Wachtler fca2b8cd07 harden eval: prevent the calc tool from accessing globals and locals ...

By passing empty globals() and locals() to eval() we can prevent simple
malicious cases where the user gets the model to output something like

```<global variable/func> or "a".count("a")```
e.g.
```signal.raise_signal(9) or "a".count("a")``` which would kill the process.
or one could maybe get it to output secrets etc.

I think to make it 100% secure one would need to parse the AST and only execute secure nodes but this should make it much more robust.

2025-10-24 14:41:12 -05:00

16 KiB

Raw Blame History

View Raw