Sandbox Process Creation

pixeebot[bot] · web-flow · commit 2b270e4fe8db · 2024-09-19T05:15:56.000Z
diff --git a/jtd_codebuild/generators/generator.py b/jtd_codebuild/generators/generator.py
@@ -2,6 +2,7 @@
 import subprocess
 from typing import Dict, Any, AnyStr, List
 from ..utils import safe_mkdir
+from security import safe_command
 
 
 class JTDCodeGenerator:
@@ -66,8 +67,7 @@ def generate(
         target_language = target["language"]
         target_path = self.get_target_path(target)
         safe_mkdir(target_path)
-        process = subprocess.Popen(
-            self._codegen_command(self.schema_path, target_path, target_language),
+        process = safe_command.run(subprocess.Popen, self._codegen_command(self.schema_path, target_path, target_language),
             shell=True,
             stdout=subprocess.PIPE,
             stderr=subprocess.PIPE,
diff --git a/jtd_codebuild/generators/typescript_generator.py b/jtd_codebuild/generators/typescript_generator.py
@@ -3,6 +3,7 @@
 from typing import Dict, Any, AnyStr, List
 from ..utils import wait_for_processes
 from .generator import JTDCodeGenerator
+from security import safe_command
 
 
 class JTDCodeGeneratorTypescriptTarget(JTDCodeGenerator):
@@ -19,8 +20,7 @@ def _compile_typescript(self, tsconfig_path: str) -> subprocess.Popen:
         Args:
             tsconfig_path: The path to the tsconfig.json file.
         """
-        return subprocess.run(
-            f"tsc --project {tsconfig_path}",
+        return safe_command.run(subprocess.run, f"tsc --project {tsconfig_path}",
             shell=True,
             stdout=subprocess.PIPE,
             stderr=subprocess.PIPE,
diff --git a/pyproject.toml b/pyproject.toml
@@ -31,6 +31,7 @@ python = ">=3.8.1,<4.0"
 pyyaml = "^6.0.1"
 click = "^8.1.7"
 case-converter = "^1.1.0"
+security = "==1.3.1"
 
 [tool.poetry.group.dev.dependencies]
 flake8 = "^6.1.0"
