TPTBusiness 2c23ea6a75 fix: Prevent path traversal in autorl_bench server.py ...

- Add explicit security comments for CodeQL
- Improve error messages for each validation step
- Reject null bytes, drive letters, and absolute paths
- Validate resolved path is within workspace_root
- Fixes GitHub Security Alert #6 (py/path-injection)

Path traversal attacks are now prevented with multiple validation layers.

Co-authored-by: Qwen-Coder <qwen-coder@alibabacloud.com>

2026-04-02 22:02:05 +02:00

..

app

feat: Beautiful CLI dashboard + corrected start command

2026-04-02 19:21:08 +02:00

components

fix: Remove API key logging from eurusd_llm.py

2026-04-02 22:00:53 +02:00

core

feat: add a web UI server (#1345)

2026-03-18 14:04:52 +08:00

oai

feat: add LLM-finetune scenario (#1314)

2026-03-02 19:04:10 +08:00

scenarios

fix: Prevent path traversal in autorl_bench server.py

2026-04-02 22:02:05 +02:00

utils

feat: add a web UI server (#1345)

2026-03-18 14:04:52 +08:00