Method validate_method

python/pyfory/policy.py:278–314

Validate a deserialized method reference. This hook is called after a method has been deserialized (either by importing or reconstructing), but before it is used. When Called ----------- - After deserializing bound methods - After reconstructing loca

(self, method, is_local: bool, **kwargs)

        return None

    def validate_method(self, method, is_local: bool, **kwargs):
        """Validate a deserialized method reference.

        This hook is called after a method has been deserialized (either by importing
        or reconstructing), but before it is used.

        When Called
        -----------
        - After deserializing bound methods
        - After reconstructing local methods from serialized code
        - Before the method is stored or called

        Security Use Cases
        ------------------
        - Validate that methods belong to expected classes
        - Block methods that could perform dangerous operations
        - Audit method references for security logging

        Args:
            method (method): The deserialized bound method object.
            is_local (bool): True if the method's class is local, False if global.
            **kwargs: Reserved for future extensions.

        Raises:
            Exception: Raise any exception to reject the method.

        Example:
            >>> class MethodChecker(DeserializationPolicy):
            ...     def validate_method(self, method, is_local, **kwargs):
            ...         # Block methods from dangerous classes
            ...         if method.__self__.__class__.__name__ == 'FileRemover':
            ...             raise ValueError("FileRemover methods not allowed")

        Note:
            `check_method` is an alias for this hook.
        """
        return None

    def validate_module(self, module_name: str, *, is_local: bool, **kwargs):
        """Validate a deserialized module reference.