Skip execution of lines containing subprocess calls

scripts/jo_utils.py

@@ -39,8 +39,9 @@ def _read_param_from_jo(jo, names, ignore_case=False):
 # See https://gitlab.cern.ch/atlas-physics/pmg/mcjoboptions/-/issues/98
 def _read_param_from_jo_withDict(jo, type, param):
     locals = {type: argparse.Namespace()}
+    skipLines=["os.system", "subprocess.call", "subprocess.Popen"] # skip lines containing these calls
     for line in jo.splitlines():
-        if "os.system" in line: continue # for security
+        if any(x in line for x in skipLines): continue
         try:
             exec(line, {}, locals)
         except:
@@ -55,8 +56,11 @@ def _env_set(jo, param):
     os.environ.clear()
     # dictionary to store environment variables
     locals = dict()
+    # skip lines containing these calls
+    skipLines=["os.system", "subprocess.call", "subprocess.Popen"]
     # Execute jO
     for line in jo.splitlines():
+        if any(x in line for x in skipLines): continue
         try:
             exec(line.strip(), globals(), locals)
         except: