Fix handling of PYTHON_RUNNER_DROPPED_CAPABILITIES

simonhammes · simonhammes · commit 2e75cab203bf · 2025-05-19T17:40:49.000+02:00
diff --git a/starter/runner.py b/starter/runner.py
@@ -49,9 +49,10 @@
 TMPFS_MOUNT_SIZE_IN_BYTES = os.environ.get(
     "PYTHON_RUNNER_TMPFS_MOUNT_SIZE_IN_BYTES", "104857600"
 )
-DROPPED_CAPABILITIES = os.environ.get("PYTHON_RUNNER_DROPPED_CAPABILITIES", "").split(
-    ","
-)
+DROPPED_CAPABILITIES = [
+    cap for cap in os.environ.get("PYTHON_RUNNER_DROPPED_CAPABILITIES", "").split(",")
+    if cap.strip()
+]
 NO_NEW_PRIVILEGES = (
     os.environ.get("PYTHON_RUNNER_NO_NEW_PRIVILEGES", "false").lower() == "true"
 )

Original file line number	Diff line number	Diff line change
`@@ -49,9 +49,10 @@`
`49`	`49`	`TMPFS_MOUNT_SIZE_IN_BYTES = os.environ.get(`
`50`	`50`	`"PYTHON_RUNNER_TMPFS_MOUNT_SIZE_IN_BYTES", "104857600"`
`51`	`51`	`)`
`52`		`-DROPPED_CAPABILITIES = os.environ.get("PYTHON_RUNNER_DROPPED_CAPABILITIES", "").split(`
`53`		`- ","`
`54`		`-)`
	`52`	`+DROPPED_CAPABILITIES = [`
	`53`	`+ cap for cap in os.environ.get("PYTHON_RUNNER_DROPPED_CAPABILITIES", "").split(",")`
	`54`	`+ if cap.strip()`
	`55`	`+]`
`55`	`56`	`NO_NEW_PRIVILEGES = (`
`56`	`57`	`os.environ.get("PYTHON_RUNNER_NO_NEW_PRIVILEGES", "false").lower() == "true"`
`57`	`58`	`)`