🔒 Address checkmarx issues. (#1672)

* Fix metadata path

* Ignore hidden directories in folder dataset

* Add check for mask_dir for segmentation tasks in Folder dataset

* Limit the gradio version to <4

* Add should exist flag to validate_path and validate the output paths

Signed-off-by: Samet Akcay <[email protected]>

---------

Signed-off-by: Samet Akcay <[email protected]>

Author: samet-akcay

src/anomalib/data/utils/image.py

@@ -264,8 +264,8 @@ def generate_output_image_filename(input_path: str | Path, output_path: str | Pa
     Returns:
         Path: The output filename to save the output predictions from the inferencer.
     """
-    input_path = Path(input_path)
-    output_path = Path(output_path)
+    input_path = validate_path(input_path)
+    output_path = validate_path(output_path, should_exist=False)
 
     # Input validation: Check if input_path is a valid directory or file
     if input_path.is_file() is False:

src/anomalib/data/utils/path.py

@@ -143,12 +143,13 @@ def contains_non_printable_characters(path: str | Path) -> bool:
     return not printable_pattern.match(str(path))
 
 
-def validate_path(path: str | Path, base_dir: str | Path | None = None) -> Path:
+def validate_path(path: str | Path, base_dir: str | Path | None = None, should_exist: bool = True) -> Path:
     """Validate the path.
 
     Args:
         path (str | Path): Path to validate.
         base_dir (str | Path): Base directory to restrict file access.
+        should_exist (bool): If True, do not raise an exception if the path does not exist.
 
     Returns:
         Path: Validated path.
@@ -215,15 +216,18 @@ def validate_path(path: str | Path, base_dir: str | Path | None = None) -> Path:
         msg = "Access denied: Path is outside the allowed directory"
         raise ValueError(msg)
 
-    # Check if the path exists
-    if not path.exists():
-        msg = f"Path does not exist: {path}"
-        raise FileNotFoundError(msg)
-
-    # Check the read and execute permissions
-    if not (os.access(path, os.R_OK) or os.access(path, os.X_OK)):
-        msg = f"Read or execute permissions denied for the path: {path}"
-        raise PermissionError(msg)
+    # In case path ``should_exist``, the path is valid, and should be
+    # checked for read and execute permissions.
+    if should_exist:
+        # Check if the path exists
+        if not path.exists():
+            msg = f"Path does not exist: {path}"
+            raise FileNotFoundError(msg)
+
+        # Check the read and execute permissions
+        if not (os.access(path, os.R_OK) or os.access(path, os.X_OK)):
+            msg = f"Read or execute permissions denied for the path: {path}"
+            raise PermissionError(msg)
 
     return path