Method validate_function

python/pyfory/policy.py:238–276

Validate a deserialized function reference. This hook is called after a function has been deserialized (either by importing from a module or reconstructing from serialized code), but before it is used. When Called ----------- - After importing global functio

(self, func, is_local: bool, **kwargs)

        return None

    def validate_function(self, func, is_local: bool, **kwargs):
        """Validate a deserialized function reference.

        This hook is called after a function has been deserialized (either by importing
        from a module or reconstructing from serialized code), but before it is used.

        When Called
        -----------
        - After importing global functions via importlib
        - After reconstructing local functions/lambdas from marshalled code
        - Before the function is stored or called

        Security Use Cases
        ------------------
        - Block dangerous built-in functions (eval, exec, compile, __import__)
        - Validate that reconstructed functions have expected signatures
        - Audit function imports for security logging

        Args:
            func (function): The deserialized function object.
            is_local (bool): True if the function is local (defined in __main__ or
                           within a function scope), False if it's a global function.
            **kwargs: Reserved for future extensions.

        Raises:
            Exception: Raise any exception to reject the function.

        Example:
            >>> class SafeFunctionChecker(DeserializationPolicy):
            ...     BLOCKED = {'eval', 'exec', 'compile', '__import__'}
            ...
            ...     def validate_function(self, func, is_local, **kwargs):
            ...         if func.__name__ in self.BLOCKED:
            ...             raise ValueError(f"Function {func.__name__} is forbidden")

        Note:
            `check_function` is an alias for this hook.
        """
        return None

    def validate_method(self, method, is_local: bool, **kwargs):
        """Validate a deserialized method reference.