OpenWebUI/open-webui
1
0
Fork 0
mirror of https://github.com/open-webui/open-webui synced 2025-06-22 18:07:17 +00:00
Code Issues Actions 4 Packages Projects Releases Wiki Activity

Inject code to block imports from blacklisted modules

Browse Source 
Co-authored-by: KG <kahghi@users.noreply.github.com>
This commit is contained in:
Rodrigo Agundez 2025-06-05 23:21:37 +08:00
parent 6dd969129d
commit bb09245792
1 changed files with 21 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

21
backend/open_webui/utils/middleware.py
View File

@ -3,6 +3,7 @@ import logging
import sys import sys
import os import os
import base64 import base64
import textwrap
import asyncio import asyncio
from aiocache import cached from aiocache import cached
@ -84,6 +85,7 @@ from open_webui.config import (
CACHE_DIR, CACHE_DIR,
DEFAULT_TOOLS_FUNCTION_CALLING_PROMPT_TEMPLATE, DEFAULT_TOOLS_FUNCTION_CALLING_PROMPT_TEMPLATE,
DEFAULT_CODE_INTERPRETER_PROMPT, DEFAULT_CODE_INTERPRETER_PROMPT,
CODE_INTERPRETER_BLACKLISTED_MODULES,
) )
from open_webui.env import ( from open_webui.env import (
SRC_LOG_LEVELS, SRC_LOG_LEVELS,
@ -2207,6 +2209,25 @@ async def process_chat_response(
try: try:
if content_blocks[-1]["attributes"].get("type") == "code": if content_blocks[-1]["attributes"].get("type") == "code":
code = content_blocks[-1]["content"] code = content_blocks[-1]["content"]
if CODE_INTERPRETER_BLACKLISTED_MODULES:
blocking_code = textwrap.dedent(f"""
import builtins
BLACKLISTED_MODULES = {CODE_INTERPRETER_BLACKLISTED_MODULES}
_real_import = builtins.__import__
def restricted_import(name, globals=None, locals=None, fromlist=(), level=0):
if name.split('.')[0] in BLACKLISTED_MODULES:
importer_name = globals.get('__name__') if globals else None
if importer_name == '__main__':
raise ImportError(
f"Direct import of module {{name}} is restricted."
)
return _real_import(name, globals, locals, fromlist, level)
builtins.__import__ = restricted_import
""")
code = blocking_code + "\n" + code
if ( if (
request.app.state.config.CODE_INTERPRETER_ENGINE request.app.state.config.CODE_INTERPRETER_ENGINE