Create analysis_tools.py

analysis_tools.py

@@ -0,0 +1,78 @@
+"""
+Nástroje pro bezpečné spuštění a validaci Python skriptů.
+"""
+import io
+import sys
+from contextlib import redirect_stdout, redirect_stderr
+
+def safe_execute_script(script_code, context=None):
+    """
+    Safely execute Python script with limited context
+    Returns script output or error message
+    """
+    if context is None:
+        context = {
+            'video_path': None,
+            'frame_data': None,
+            'metadata': None
+        }
+    
+    output = io.StringIO()
+    error = io.StringIO()
+    
+    try:
+        with redirect_stdout(output), redirect_stderr(error):
+            exec_globals = {
+                '__builtins__': {
+                    'print': print,
+                    'str': str,
+                    'int': int,
+                    'float': float,
+                    'list': list,
+                    'dict': dict,
+                    'tuple': tuple,
+                    'range': range,
+                    'len': len,
+                    'enumerate': enumerate,
+                    'zip': zip,
+                    'min': min,
+                    'max': max,
+                    'sum': sum,
+                    'abs': abs,
+                    'round': round
+                },
+                'context': context
+            }
+            
+            exec(script_code, exec_globals)
+        
+        if error.getvalue():
+            return f"Error: {error.getvalue()}"
+        else:
+            return output.getvalue()
+        
+    except Exception as e:
+        return f"Error executing script: {str(e)}"
+
+
+def validate_python_script(script_code):
+    """
+    Validate Python script syntax and restricted functions
+    Returns (is_valid, error_message)
+    """
+    import ast
+    
+    try:
+        tree = ast.parse(script_code)
+        
+        for node in ast.walk(tree):
+            if isinstance(node, ast.Import) or isinstance(node, ast.ImportFrom):
+                return (False, "Import statements are not allowed")
+            if isinstance(node, ast.Call) and isinstance(node.func, ast.Name):
+                if node.func.id in ['eval', 'exec', 'open', 'execfile']:
+                    return (False, f"Function {node.func.id}() is not allowed")
+        
+        return (True, "Script is valid")
+    except SyntaxError as e:
+        return (False, f"Syntax error: {str(e)}")
+