Fix CodeQL Security Issue for Neural Coder (#1857)

zehao-intel · web-flow · commit 47d73b34f80a · 2024-06-10T21:46:53.000+08:00
Signed-off-by: zehao-intel &lt;zehao.huang@intel.com&gt;
diff --git a/neural_coder/interface.py b/neural_coder/interface.py
@@ -508,7 +508,7 @@ def enable(
 
     ### Benchmark
     if run_bench:
-        if "github.com" in code and ".py" in code:
+        if "github" in code and ".com" in code and ".py" in code:
             code = globals.list_code_path[0]
             entry_code = globals.list_code_path[0]
 
diff --git a/neural_coder/utils/device.py b/neural_coder/utils/device.py
@@ -55,7 +55,7 @@ def check_has(s):
 
 def detect_code_device_compatibility(code_path):
     # handle github py url
-    if "github.com" in code_path and ".py" in code_path:
+    if "github" in code_path and ".com" in code_path and ".py" in code_path:
         import requests
 
         code_path = code_path.replace("github.com", "raw.githubusercontent.com").replace("/blob", "")
diff --git a/neural_coder/utils/handle_user_input.py b/neural_coder/utils/handle_user_input.py
@@ -52,11 +52,11 @@ def get_user_code_path(user_input: str) -> List:
     global user_input_type
     if type(user_input) == list:
         user_input_type = "a list of files"
-    elif "github.com" in user_input and ".py" in user_input:
+    elif "github" in user_input and ".com" in user_input and ".py" in user_input:
         user_input_type = "url_py"
     elif ".py" in user_input:
         user_input_type = "file"
-    elif "github.com" in user_input:
+    elif "github" in user_input and ".com" in user_input:
         user_input_type = "url_repo"
     else:
         user_input_type = "folder"
