Xu Yang bd0a95efac fix: path traversal risk (#1050) ...

* check the target file path is in a designed folder and make sure it's pdf

* Potential fix for code scanning alert no. 55: Uncontrolled data used in path expression

Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com>

* Potential fix for code scanning alert no. 56: Uncontrolled data used in path expression

Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com>

* continue improving

* Potential fix for code scanning alert no. 62: Uncontrolled data used in path expression

Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com>

* apply secure_filename

* Potential fix for code scanning alert no. 64: Uncontrolled data used in path expression

Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com>

* fix CI

---------

Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com>
Co-authored-by: Xu Yang <xuyang1@microsoft.com>

2025-07-10 13:16:14 +08:00

..

app

feat: enable drafting with knowledge (#998)

2025-07-09 18:36:42 +08:00

components

fix: split then sample & remove simple model guide in ds proposal (#1034)

2025-07-09 15:47:37 +08:00

core

fix: remove refine decision & bug fix (#1031)

2025-07-08 16:34:25 +08:00

log

fix: path traversal risk (#1050)

2025-07-10 13:16:14 +08:00

oai

fix: fix a small bug in response_schema (#1043)

2025-07-09 18:40:48 +08:00

scenarios

fix draft bugs (#1048)

2025-07-10 11:47:23 +08:00

utils

fix: prevent parallelism in feedback and record steps (#1046)

2025-07-09 18:36:05 +08:00