From 5df039c107661a49d2e0c9968b265d2b92fa4fe1 Mon Sep 17 00:00:00 2001
From: Tasha Upchurch <TashaSkyUp@gmail.com>
Date: Mon, 23 Oct 2023 17:40:06 -0400
Subject: [PATCH] added a bit of security around the exec calls in the
 functional nodes.

env GDE_SECURE_MODE can be set to NO_EXEC

to disable execution of code
---
 functional.py | 17 +++++++++++++++++
 1 file changed, 17 insertions(+)

diff --git a/functional.py b/functional.py
index 2262039..1dcd543 100644
--- a/functional.py
+++ b/functional.py
@@ -22,6 +22,23 @@ def ETK_functional_base(cls):
     NODE_CLASS_MAPPINGS[cls.__name__] = cls
     return cls
 
+def new_exec(c, g, l):
+    global old_exec
+    import os
+    # if GDE_SECURE_MODE is set to NO_EXEC then we will not execute any code
+    # this is a security feature to prevent malicious code from being executed
+    # this is set in the GDE settings
+    GDE_SECURE_MODE = os.environ.get("GDE_SECURE_MODE", None)
+    if GDE_SECURE_MODE == "NO_EXEC":
+        raise Exception("GDE_SECURE_MODE is set to NO_EXEC, not executing code")
+
+    old_exec(c, g, l)
+
+    return locals
+
+old_exec = exec
+exec = new_exec
+
 
 @ETK_functional_base
 class FuncBase: