Method validate_module

python/pyfory/policy.py:316–354

Validate a deserialized module reference. This hook is called before a module is imported during deserialization. When Called ----------- - Before importing modules via importlib.import_module() - Before the module is stored or its contents are accessed

(self, module_name: str, *, is_local: bool, **kwargs)

        return None

    def validate_module(self, module_name: str, *, is_local: bool, **kwargs):
        """Validate a deserialized module reference.

        This hook is called before a module is imported during deserialization.

        When Called
        -----------
        - Before importing modules via importlib.import_module()
        - Before the module is stored or its contents are accessed

        Security Use Cases
        ------------------
        - Whitelist/blacklist modules by name or prefix
        - Prevent imports of system modules (os, subprocess, sys, etc.)
        - Audit module imports for security logging

        Args:
            module_name (str): The name of the module to import (e.g., 'os.path').
            is_local (bool): True if the reference being resolved is local (defined
                           in __main__ or within a function/method scope), False
                           otherwise.
            **kwargs: Reserved for future extensions.

        Raises:
            Exception: Raise any exception to reject the module import.

        Example:
            >>> class ModuleWhitelistChecker(DeserializationPolicy):
            ...     ALLOWED = {'builtins', 'datetime', 'decimal', 'collections'}
            ...
            ...     def validate_module(self, module_name, is_local, **kwargs):
            ...         root = module_name.split('.')[0]
            ...         if root not in self.ALLOWED:
            ...             raise ValueError(f"Module {module_name} not whitelisted")

        Note:
            `check_module` is an alias for this hook.
        """
        return None

    # ============================================================================
    # Protocol Interception Hooks (Interceptors)