jR ddlZddlZddlZddlmZejdddZejddZejd dd ZdS) N) CorpusReadersessionT)scopeautousec#2Kddlm}ddlm}tjt|}d|jD}||vr(|j |d|_ d|_ dtj ddtjD}||vr>tjg||tj d<d|_ d|_ dVdS)aIAuthorize pytest's private session temp base for the whole test tree. Under the pathsec sandbox a data/corpus root must resolve inside an allowed NLTK data root. pathsec trusts a *private* per-user temp dir (macOS ``$TMPDIR``, Windows ``%TEMP%``) but not a *shared, world-writable* one (Linux ``/tmp``, mode ``1777``) -- a local attacker could plant files there (CWE-377/378). pytest's own session base ``/pytest-of-/...`` is private, so authorizing exactly that base keeps the suite green everywhere without trusting all of ``/tmp``. This lives in ``nltk/test/conftest.py`` (not only ``unit/``) so it also covers tests directly under ``nltk/test/`` and the ``--doctest-modules`` run. It is session-scoped so it runs before module-/session-scoped fixtures, and exports the base via ``NLTK_DATA`` as well so ``multiprocessing`` *spawn* children (used by several ReDoS / "does not hang" tests) -- which inherit ``os.environ`` but not ``nltk.data.path`` edits -- trust the same base. Test-only; no production behavior changes. rN)pathseccg|]C}t|ttjt|DS) isinstancestrospathrealpath.0ps u/home/lighthouse/badge-speaker-benchmark/.benchmark-venv-community/lib/python3.11/site-packages/nltk/test/conftest.py z._authorize_pytest_basetemp..!s> U U U!*QPSBTBT URW  c!ff % % U U Ucg|]}||Sr r rs rrz._authorize_pytest_basetemp..'sSSSqQRSSSSr NLTK_DATA) nltk.datadatanltkrr rrr getbasetempappend_ALLOWED_ROOTS_CACHE_LAST_DATA_PATHSenvirongetsplitpathsepjoin)tmp_path_factory _nltk_datarbaseknown env_partss r_authorize_pytest_basetempr* s(#""""" 7  C 0 < < > >?? @ @D U Uz U U UE 5t$$$'+$#' SSBJNN;;;AA"*MMSSSI 9"$*//2DI2Dt2D"E"E ;'+$#'  EEEEEr)rc ddlm}|j|d|j|ddS#t$rYdSwxYw)z(Disable matplotlib plotting in test coderNgcashow)matplotlib.pyplotpyplotpatchobject ImportError)mockerplts r mock_plotr5/sq '''''' C''' C(((((      srEs ++++++i..." " /." J     h---  .-   r