X-Git-Url: https://mudpy.org/gitweb?p=mudpy.git;a=blobdiff_plain;f=mudpy%2Fmisc.py;h=ecab4718610790367ea334c5157a8b3ec8ed9c77;hp=2cd7992b9fbe1ec0e0ed677fffdc42bdc426f9ae;hb=c4245fbcb7129049f24512f21fba727e620246dc;hpb=a657b530f33267e5e1237355db4a79d40c914baf diff --git a/mudpy/misc.py b/mudpy/misc.py index 2cd7992..ecab471 100644 --- a/mudpy/misc.py +++ b/mudpy/misc.py @@ -1218,7 +1218,9 @@ def weighted_choice(data): expanded.append(key) # return one at random - return random.choice(expanded) + # Whitelist the random.randrange() call in bandit since it's not used for + # security/cryptographic purposes + return random.choice(expanded) # nosec def random_name(): @@ -1265,7 +1267,9 @@ def random_name(): name = "" # create a name of random length from the syllables - for _syllable in range(random.randrange(2, 6)): + # Whitelist the random.randrange() call in bandit since it's not used for + # security/cryptographic purposes + for _syllable in range(random.randrange(2, 6)): # nosec name += weighted_choice(syllables) # strip any leading quotemark, capitalize and return the name @@ -1432,9 +1436,12 @@ def reload_data(): """Reload all relevant objects.""" universe.save() old_userlist = universe.userlist[:] + old_loglines = universe.loglines[:] for element in list(universe.contents.values()): element.destroy() universe.load() + new_loglines = universe.loglines[:] + universe.loglines = old_loglines + new_loglines for user in old_userlist: user.reload() @@ -1680,13 +1687,6 @@ def get_choice_action(user): def call_hook_function(fname, arglist): """Safely execute named function with supplied arguments, return result.""" - # strip any explicit leader or parameter - # TODO(fungi) remove this once the menu functions transition is complete - if fname.startswith("mudpy."): - fname = fname[6:] - if fname.endswith("(user)"): - fname = fname[:-6] - # all functions relative to mudpy package function = mudpy @@ -1918,33 +1918,14 @@ def handler_active(user): command = find_command(command_name) # if it's allowed, do it - ran = False + result = None if actor.can_run(command): - # dereference the relative object path for the requested function - # TODO(fungi) use call_hook_function() here instead - action = mudpy action_fname = command.get("action", command.key) - for component in action_fname.split("."): - try: - action = getattr(action, component) - ran = True - except AttributeError: - log('Could not find action function "%s" for command "%s"' - % (action_fname, command_name)) - action = None - break - if action: - try: - action(actor, parameters) - except Exception: - log('Command string "%s" from user %s raised an ' - 'exception...\n%s' % ( - input_data, actor.owner.account.get("name"), - traceback.format_exc())) - mudpy.command.error(actor, input_data) + if action_fname: + result = call_hook_function(action_fname, (actor, parameters)) # if the command was not run, give an error - if not ran: + if not result: mudpy.command.error(actor, input_data) # if no input, just idle back with a prompt