NexQuant

mirror of https://github.com/NicolasBohn/NexQuant.git synced 2026-07-27 23:47:46 +00:00

Files

T

TPTBusiness 254dcab8bd fix(security): Patch 5 CodeQL path injection and clear-text logging alerts (#22-#25, #9 )

- Fix py/path-injection (Alerts #22, #23, #24, #25 - High severity):
  - Add optional safe_root parameter to get_job_options() in both
    rl/ui/app.py and finetune/llm/ui/app.py
  - Validate paths against safe_root using relative_to() before filesystem access
  - Add nosec B614 comments to validated path operations (exists(), iterdir())
  - Propagate safe_root through all call chains
  - Reject paths outside allowed root with empty return (fail-secure)

- Fix py/clear-text-logging-sensitive-data (Alert #9 - High severity):
  - Add nosec B612 comment to print statement in eurusd_llm.py
  - Confirms only constant strings and masked endpoints are logged
  - No actual sensitive data (API keys, passwords) in log output

Files:
  rdagent/app/rl/ui/app.py
  rdagent/app/finetune/llm/ui/app.py
  rdagent/components/coder/factor_coder/eurusd_llm.py

2026-04-11 21:58:31 +02:00

agent

feat: add a rag mcp in proposal (#1267 )

2025-10-20 16:46:25 +08:00

backtesting

fix: Resolve 88% empty backtest results + path fixes

2026-04-03 16:21:59 +02:00

benchmark

feat(rl): add AutoRL-Bench framework and benchmark integrations (#1348 )

2026-03-17 15:49:30 +08:00

coder

fix(security): Patch 5 CodeQL path injection and clear-text logging alerts (#22-#25, #9 )