tree 2d5f88e0ef147b6e2add78e31294d545b924c08a
parent c6a5883e193a8f89d1b29dd0317f7976e7a969fa
author Domino Valdano <dvaldano@pivotal.io> 1615308996 -0500
committer Domino Valdano <dvaldano@vmware.com> 1615427092 -0500

Disallow 'deserialization', 'serialization', & 'get' loss and metrics

Also:
  - Remove whitelisting of any metrics containing the string
    "top_k_categorical_accuracy".  This is already a builtin metric, and
    would compromise security if we allowed arbitrary python code
    containing this string to be passed along to keras.

  - Remove elements which start with an underscore from list of builtins.

  - Avoid using metrics[2:-2] which assumes first 2 characters are [' or
    [" and '] or "].  This prevents sneaky inputs like metrics=[*__builtins__ ]