oib/aitbc
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Secure pickle deserialization in IPFS storage (issue #22) #27

Merged
oib merged 2 commits from 22-pickle-security into main 2026-03-15 22:33:13 +01:00
Conversation 1 Commits 2 Files Changed 3 +3 -2
1 changed files with 3 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files
Showing only changes of commit cf5684f596 - Show all commits

5
apps/coordinator-api/src/app/services/multi_language/translation_cache.py
View File

@@ -7,6 +7,7 @@ import asyncio
import json import json
import logging import logging
import pickle import pickle
from ...services.secure_pickle import safe_loads
from typing import Optional, Dict, Any, List from typing import Optional, Dict, Any, List
from dataclasses import dataclass, asdict from dataclasses import dataclass, asdict
from datetime import datetime, timedelta from datetime import datetime, timedelta
@@ -98,7 +99,7 @@ class TranslationCache:
if cached_data: if cached_data:
# Deserialize cache entry # Deserialize cache entry
cache_entry = pickle.loads(cached_data) cache_entry = safe_loads(cached_data)
# Update access statistics # Update access statistics
cache_entry.access_count += 1 cache_entry.access_count += 1
@@ -453,7 +454,7 @@ class TranslationCache:
try: try:
cached_data = await self.redis.get(key) cached_data = await self.redis.get(key)
if cached_data: if cached_data:
cache_entry = pickle.loads(cached_data) cache_entry = safe_loads(cached_data)
export_data.append(asdict(cache_entry)) export_data.append(asdict(cache_entry))
except Exception as e: except Exception as e:
logger.warning(f"Failed to export key {key}: {e}") logger.warning(f"Failed to export key {key}: {e}")