Add trust_remote_code Parameter and Set Default to False

[yafshar]

What does this PR do?

• Introduced a new model parameter trust_remote_code
• Set the default value of trust_remote_code to False to enhance security

Before submitting

• Did you read the contributor guideline?
• Did you write any new necessary tests?

[hohoCode]

Can we instead set trust_remote_code to True by default? As many more advanced models are getting their own vibes these days. So we have one less thing to worry about? lol.

[yafshar]

@hohoCode it is set to True, by default, but I am suggesting to remove the default behavior.
While setting trust_remote_code to True by default could simplify the process for users, it poses substantial security risks. By allowing remote code execution by default, we open the door to potential vulnerabilities, as users might inadvertently incorporate harmful or unverified code from the web. Which is very common at the moment! It’s safer to keep trust_remote_code set to False by default and encourage users to explicitly enable it only when they are confident about the source and safety of the remote code.

[hiyouga]

could you rebase this pr? https://github.com/hiyouga/LLaMA-Factory/blob/main/.github/CONTRIBUTING.md

[yafshar]

could you rebase this pr? https://github.com/hiyouga/LLaMA-Factory/blob/main/.github/CONTRIBUTING.md

done!