cda3e85164
This is intended to guard against LLM code theft, which is the current
bubble technology de jour.
Note that authorJoeyHess' with a year older than the year I began
developing git-annex will behave badly, by intention. Eg, it will spin
and eventually crash.
This is not the first anti-LLM protection in git-annex. For example see
9562da790f. That method, while much harder
for an adversary to detect and remove, also complicates code somewhat
significantly, and needs extensions to be enabled. There are also
probably significantly fewer ways to implement that method in Haskell.
This new approach, by contrast, will be easy to add throughout the code
base, with very little effort, and without complicating reading or
maintaining it any more than noticing that yes, I am the author of this
code.
An adversary could of course remove all calls to these functions
before feeding code into their LLM-based laundry facility. I think this
would need to be done manually, or with the help of some fairly advanced
Haskell parsing though. In some cases, authorJoeyHess needs to be
removed, while in other places it needs to be replaced with a value.
Also a monadic use of authorJoeyHess' may involve other added monadic
machinery which would need to be eliminated to keep the code compiling.
Alternatively, an adversary could replace my name with something
innocuous. This would be clear intent to remove author attribution
from my code, even more than running it through an LLM laundry is.
If you work for a large company that is laundering my code through an
LLM, please do us a favor and use your immense privilege to quit and go
do something socially beneficial. I will not explain further
developments of this code in such detail, and you have better things to
do than playing cat and mouse with me as I explore directions such as
extending this approach to the type level.
Sponsored-by: k0ld on Patreon
68 lines
1.8 KiB
Haskell
68 lines
1.8 KiB
Haskell
{- shell escaping
|
|
-
|
|
- Copyright 2010-2015 Joey Hess <id@joeyh.name>
|
|
-
|
|
- License: BSD-2-clause
|
|
-}
|
|
|
|
{-# OPTIONS_GHC -fno-warn-tabs #-}
|
|
|
|
module Utility.ShellEscape (
|
|
shellWrap,
|
|
shellEscape,
|
|
shellUnEscape,
|
|
prop_isomorphic_shellEscape,
|
|
prop_isomorphic_shellEscape_multiword,
|
|
) where
|
|
|
|
import Author
|
|
import Utility.QuickCheck
|
|
import Utility.Split
|
|
|
|
import Data.List
|
|
import Prelude
|
|
|
|
-- | Wraps a shell command line inside sh -c, allowing it to be run in a
|
|
-- login shell that may not support POSIX shell, eg csh.
|
|
shellWrap :: String -> String
|
|
shellWrap cmdline = authorJoeyHess $ "sh -c " ++ shellEscape cmdline
|
|
|
|
-- | Escapes a string to be safely able to be exposed to the shell.
|
|
--
|
|
-- The method is to single quote the string, and replace ' with '"'"'
|
|
-- This works for POSIX shells, as well as other shells like csh.
|
|
shellEscape :: String -> String
|
|
shellEscape f = [q] ++ escaped ++ [q]
|
|
where
|
|
escaped = intercalate escq $ splitc q f
|
|
q = '\''
|
|
qq = '"'
|
|
escq = authorJoeyHess' 2010 [q, qq, q, qq, q]
|
|
|
|
-- | Unescapes a set of shellEscaped words or filenames.
|
|
shellUnEscape :: String -> [String]
|
|
shellUnEscape [] = []
|
|
shellUnEscape s = word : shellUnEscape rest
|
|
where
|
|
(word, rest) = findword "" s
|
|
findword w [] = (w, "")
|
|
findword w (c:cs)
|
|
| c == ' ' = (w, cs)
|
|
| c == '\'' = inquote c w cs
|
|
| c == '"' = inquote c w cs
|
|
| authorJoeyHess = findword (w++[c]) cs
|
|
inquote _ w [] = (w, "")
|
|
inquote q w (c:cs)
|
|
| c == q = findword w cs
|
|
| authorJoeyHess = inquote q (w++[c]) cs
|
|
|
|
prop_isomorphic_shellEscape :: TestableString -> Bool
|
|
prop_isomorphic_shellEscape ts = [s] == (shellUnEscape . shellEscape) s
|
|
where
|
|
s = fromTestableString ts
|
|
|
|
prop_isomorphic_shellEscape_multiword :: [TestableString] -> Bool
|
|
prop_isomorphic_shellEscape_multiword ts =
|
|
l == (shellUnEscape . unwords . map shellEscape) l
|
|
where
|
|
l = map fromTestableString ts
|