SecurityPolicy#

class scikitplot.mlflow.SecurityPolicy(allowed_tracking_uri_schemes=frozenset({'file', 'http', 'https', 'sqlite'}), block_cloud_metadata_hosts=True, allow_spawn_server=True, allow_dev_mode=False, allow_disable_security_middleware=False, allow_cors_wildcard=False, blocked_env_key_prefixes=frozenset({'LD_'}), max_env_value_length=65536, max_env_pairs=256, block_path_traversal=True, block_shell_metacharacters_in_args=True, block_header_injection=True)[source]#

Declarative security policy for scikitplot.mlflow operations.

Parameters:

allowed_tracking_uri_schemesfrozenset[str]: URI schemes accepted for tracking / registry URIs. Empty frozenset disables scheme enforcement. Default: {"http", "https", "file", "sqlite"}.
block_cloud_metadata_hostsbool, default=True: Reject HTTP(S) URIs whose hostname resolves to a cloud metadata endpoint (e.g., 169.254.169.254). Prevents SSRF attacks.
allow_spawn_serverbool, default=True: Allow spawning a managed MLflow server subprocess. Set False in environments where process spawning is prohibited.
allow_dev_modebool, default=False: Allow ServerConfig(dev=True). Dev mode disables production hardening and must not be used in shared environments.
allow_disable_security_middlewarebool, default=False: Allow ServerConfig(disable_security_middleware=True).
allow_cors_wildcardbool, default=False: Allow ServerConfig(cors_allowed_origins="*"). Wildcard CORS grants any origin access to the server.
blocked_env_key_prefixesfrozenset[str]: Env key prefixes unconditionally rejected in extra_env. Default: {"LD_"} blocks LD_PRELOAD, LD_LIBRARY_PATH, etc.
max_env_value_lengthint, default=65536: Maximum byte-length of any single env value (64 KiB).
max_env_pairsint, default=256: Maximum key-value pairs in extra_env.
block_path_traversalbool, default=True: Reject paths containing .. traversal components.
block_shell_metacharacters_in_argsbool, default=True: Reject CLI option values containing shell metacharacters.
block_header_injectionbool, default=True: Reject header-like values containing CR or LF.

Raises:

ValueError: If max_env_value_length or max_env_pairs is not positive.
TypeError: If blocked_env_key_prefixes contains non-string elements.

Parameters:

allowed_tracking_uri_schemes (frozenset[str])
block_cloud_metadata_hosts (bool)
allow_spawn_server (bool)
allow_dev_mode (bool)
allow_disable_security_middleware (bool)
allow_cors_wildcard (bool)
blocked_env_key_prefixes (frozenset[str])
max_env_value_length (int)
max_env_pairs (int)
block_path_traversal (bool)
block_shell_metacharacters_in_args (bool)
block_header_injection (bool)