From d74cee5d106bc894d59b91cb06118ebea7d5a168 Mon Sep 17 00:00:00 2001 From: PrathameshWalunj Date: Fri, 6 Feb 2026 14:51:11 -0500 Subject: [PATCH 1/2] Add shutil, code, and fileinput to UNSAFE_STRINGS --- lib/constants.py | 5 +++++ 1 file changed, 5 insertions(+) diff --git a/lib/constants.py b/lib/constants.py index c43f8db..0488a93 100644 --- a/lib/constants.py +++ b/lib/constants.py @@ -85,6 +85,9 @@ "cProfile", "cloudpickle.load", "cloudpickle.loads", + "code", + "code.interact", + "code.InteractiveConsole", "code.InteractiveInterpreter", "codecs.decode", "codeop.compile_command", @@ -101,6 +104,7 @@ "eval", "exec", "execfile", + "fileinput", "get_type_hints", "gzip", "hashlib", @@ -135,6 +139,7 @@ "requests", "runpy", "safer_pickle_hook", + "shutil", "socket", "ssl", "stdin", From 165be490ce17c9c0b057b0d400e27703dd352cb5 Mon Sep 17 00:00:00 2001 From: 0x00 <45222020+0x00nier@users.noreply.github.com> Date: Tue, 10 Feb 2026 13:43:30 -0500 Subject: [PATCH 2/2] Add shutil.disk_usage to allowlist --- lib/constants.py | 1 + 1 file changed, 1 insertion(+) diff --git a/lib/constants.py b/lib/constants.py index 0488a93..d4c383a 100644 --- a/lib/constants.py +++ b/lib/constants.py @@ -189,6 +189,7 @@ "reconstruct", "scipy", "set", + "shutil.disk_usage", "sklearn", "spacy", "str",