bakefile 0.0.6__py3-none-any.whl → 0.0.7__py3-none-any.whl

bake/manage/write_bakefile.py

@@ -1,8 +1,15 @@
 import types
 from pathlib import Path
 
+from bake.samples import simple
 from bake.utils.constants import BAKEBOOK_NAME_IN_SAMPLES
 
+# Allowed sample modules
+# This dictionary acts as a whitelist for security - only these modules can be used
+ALLOWED_SAMPLE_MODULES: dict[str, types.ModuleType] = {
+    simple.__name__: simple,
+}
+
 
 def write_bakefile(
     bakefile_path: Path, bakebook_name: str, sample_module: types.ModuleType
@@ -12,9 +19,21 @@ def write_bakefile(
             f"Module `{sample_module.__name__}` must have `{BAKEBOOK_NAME_IN_SAMPLES}` attribute"
         )
 
-    if sample_module.__file__ is None:
-        raise ValueError(f"Could not find `{sample_module.__name__}`")
+    module_name = sample_module.__name__
+    if module_name not in ALLOWED_SAMPLE_MODULES:
+        raise ValueError(
+            f"Module `{module_name}` is not in the allowed sample modules list. "
+            f"Allowed modules: {list(ALLOWED_SAMPLE_MODULES.keys())}"
+        )
+
+    allowed_module = ALLOWED_SAMPLE_MODULES[module_name]
+    if sample_module is not allowed_module:
+        raise ValueError(f"Module `{module_name}` does not match the allowed module object")
+
+    if allowed_module.__file__ is None:
+        raise ValueError(f"Could not find file for module `{module_name}`")
 
-    original_bakefile_content = Path(sample_module.__file__).read_text()
+    source_file_path = Path(allowed_module.__file__)
+    original_bakefile_content = source_file_path.read_text()
     customized_content = original_bakefile_content.replace(BAKEBOOK_NAME_IN_SAMPLES, bakebook_name)
     bakefile_path.write_text(customized_content)

{bakefile-0.0.6.dist-info → bakefile-0.0.7.dist-info}/METADATA

@@ -1,6 +1,6 @@
 Metadata-Version: 2.3
 Name: bakefile
-Version: 0.0.6
+Version: 0.0.7
 Summary: Add your description here
 Author: Wisaroot Lertthaweedech
 Author-email: Wisaroot Lertthaweedech <l.wisaroot@gmail.com>

{bakefile-0.0.6.dist-info → bakefile-0.0.7.dist-info}/RECORD

@@ -31,7 +31,7 @@ bake/manage/add_inline.py,sha256=yefHmF33ghCB8NZ-v61ybeVsaeE8iDFvfRGeTAKg4I8,224
 bake/manage/find_python.py,sha256=oVmd8KaSsgDQWHuGZpYiQx-DHn50P9EkRi6-YIad99E,7165
 bake/manage/lint.py,sha256=OqwYFF8GGvzHGVPuJcWMRAv5esXEIX4nQXdGcChnkqA,2394
 bake/manage/run_uv.py,sha256=QzlKeVpr20dXNDcwUgyJqnXT4MofRqK-6XkWpzBbUhE,3234
-bake/manage/write_bakefile.py,sha256=efGViLk7sh-QX9Mox7yQw_A1Tp7EOuc_vmSTbFmXUm0,736
+bake/manage/write_bakefile.py,sha256=ZlBL2XBy0XIY8_4t56szvq2c6-DwEyRuNljjZI3m0ls,1487
 bake/py.typed,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
 bake/samples/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
 bake/samples/simple.py,sha256=hP2TW-D7BQBGJseqRPpilxkoQ8ScTuZZePICupyvFKA,155
@@ -57,7 +57,7 @@ bakelib/space/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
 bakelib/space/base.py,sha256=bJlpPkP85xBu8X5fJoVaHrMzX27rQrYTEPSObwBANJ8,6008
 bakelib/space/python.py,sha256=UEr4Jo76T2cbAQdClVu7RvJYzflLE9i_xFohcNhjFjw,2597
 bakelib/space/utils.py,sha256=xx4X_txhDH_p97CKJ-KuvFpgfNBC0y_din1IBlUVusU,2983
-bakefile-0.0.6.dist-info/WHEEL,sha256=XV0cjMrO7zXhVAIyyc8aFf1VjZ33Fen4IiJk5zFlC3g,80
-bakefile-0.0.6.dist-info/entry_points.txt,sha256=Ecvvh7BYHCPJ0UdntrDc3Od6AZdRPXN5Z7o_7ok_0Qw,107
-bakefile-0.0.6.dist-info/METADATA,sha256=6tec3_eRxbtTAsdHJHUC1Vo4yIondUR_U28oRq2Cp1c,2331
-bakefile-0.0.6.dist-info/RECORD,,
+bakefile-0.0.7.dist-info/WHEEL,sha256=XV0cjMrO7zXhVAIyyc8aFf1VjZ33Fen4IiJk5zFlC3g,80
+bakefile-0.0.7.dist-info/entry_points.txt,sha256=Ecvvh7BYHCPJ0UdntrDc3Od6AZdRPXN5Z7o_7ok_0Qw,107
+bakefile-0.0.7.dist-info/METADATA,sha256=zVQg9_SCgUUvIT_rosZIW8pf658SG3pDTfyp4I5qMek,2331
+bakefile-0.0.7.dist-info/RECORD,,