Skip to content

Commit c3ba558

Browse files
authored
Refactor the CLI dynamic command resolution (#362)
* Replaced eval with importlib for secure dynamic command module loading, better mitigating arbitrary code execution risks. * Defined a plugin folder and a specified list of known modules for tighter execution control, enhancing CLI security. * Enhanced error handling for clearer feedback on command module loading issues. * Shifted to pathlib for more robust path handling, replacing os.path and string manipulations. * Adopted importlib.metadata for fetching package versions, offering a fallback for unavailable versions.
1 parent 8814863 commit c3ba558

File tree

4 files changed

+774
-831
lines changed

4 files changed

+774
-831
lines changed
Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1 +1 @@
1-
poetry==1.7.1
1+
poetry==1.8.2

.github/workflows/constraints.txt

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -1,4 +1,4 @@
1-
pip==23.3.2
2-
nox==2023.4.22
1+
pip==24.0
2+
nox==2024.3.2
33
nox-poetry==1.0.3
4-
virtualenv==20.25.0
4+
virtualenv==20.25.1

0 commit comments

Comments
 (0)