fix: add ctypes, signal, http to unsafe_globals blocklist

[scruge1]

Summary

Add ctypes, signal, http, http.client, urllib, and urllib.request to the unsafe_globals CRITICAL blocklist in settings.py.

Problem

ctypes.CDLL is not in the current blocklist. A malicious pickle/joblib/numpy file using ctypes.CDLL in __reduce__ passes modelscan with "No issues found" and achieves:

• DLL loading with DllMain execution (single-stage RCE)
• C runtime access via ctypes.CDLL("msvcrt").system(b"cmd") (two-stage RCE)

Confirmed end-to-end RCE:

import pickle, ctypes
class E:
    def __reduce__(self):
        return (ctypes.CDLL, ("msvcrt",))
with open("model.pkl","wb") as f: pickle.dump(E(), f)
# modelscan -p model.pkl → "No issues found!"
result = pickle.loads(open("model.pkl","rb").read())
result.system(b"echo PWNED > pwned.txt")  # File created

Also confirmed bypassing on: signal.raise_signal (DoS), http.client.HTTPConnection (network exfil).

Fix

Add these modules to the CRITICAL blocklist alongside existing entries like os, subprocess, sys.

Affected Formats

Confirmed on: Pickle (.pkl), Joblib (.pkl), NumPy (.npy). Likely affects all pickle-based formats.

Related Huntr reports submitted for Pickle, Joblib, and NPY formats.