mmarch/text-generation-webui
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

Merge pull request from GHSA-hv5m-3rp9-xcpf

Browse source 
* Remove eval of API input

* Remove unnecessary eval/exec for security

* Use ast.literal_eval

* Use ast.literal_eval

---------

Co-authored-by: oobabooga <112222186+oobabooga@users.noreply.github.com>
This commit is contained in:
Mikel Bober-Irizar 2023-04-16 05:36:50 +01:00 • committed by GitHub
parent d2ea925fa5
commit 16a3a5b039
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23
5 changed files with 15 additions and 13 deletions
Download patch file Download diff file Expand all files Collapse all files

12
server.py
View file

@ -214,7 +214,7 @@ def update_model_parameters(state, initial=False):
elif element == 'cpu_memory' and value is not None:
value = f"{value}MiB"
exec(f"shared.args.{element} = value")
setattr(shared.args, element, value)
found_positive = False
for i in gpu_memories:
@ -449,14 +449,14 @@ def set_interface_arguments(interface_mode, extensions, bool_active):
shared.args.extensions = extensions
for k in modes[1:]:
exec(f"shared.args.{k} = False")
setattr(shared.args, k, False)
if interface_mode != "default":
exec(f"shared.args.{interface_mode} = True")
setattr(shared.args, interface_mode, True)
for k in bool_list:
exec(f"shared.args.{k} = False")
setattr(shared.args, k, False)
for k in bool_active:
exec(f"shared.args.{k} = True")
setattr(shared.args, k, True)
shared.need_restart = True
@ -673,7 +673,7 @@ def create_interface():
modes = ["default", "notebook", "chat", "cai_chat"]
current_mode = "default"
for mode in modes[1:]:
if eval(f"shared.args.{mode}"):
if getattr(shared.args, mode):
current_mode = mode
break
cmd_list = vars(shared.args)