TPTBusiness 28e45c9d10 fix: Prevent path injection in RL Job Summary UI ...

- Use _safe_resolve() for job_path validation (line 198)
- Fixes CodeQL py/path-injection warning (Alert #3)
- Consistent with FT UI fix (commit 2d48653f)

Security improvements:
- All user-provided paths now go through _safe_resolve()
- Path traversal sequences rejected before filesystem access
- Clear error message for invalid paths

Fixes GitHub Code Scanning Alert #3 (py/path-injection)

2026-04-02 23:07:13 +02:00

..

app

fix: Prevent path injection in RL Job Summary UI

2026-04-02 23:07:13 +02:00

components

fix: Remove API key presence detection from logging

2026-04-02 23:06:57 +02:00

core

feat: add a web UI server (#1345)

2026-03-18 14:04:52 +08:00

oai

feat: add LLM-finetune scenario (#1314)

2026-03-02 19:04:10 +08:00

scenarios

fix: Improve path traversal prevention with dedicated helper function

2026-04-02 23:06:29 +02:00

utils

feat: add a web UI server (#1345)

2026-03-18 14:04:52 +08:00