NexQuant

mirror of https://github.com/NicolasBohn/NexQuant.git synced 2026-07-28 16:07:46 +00:00

Files

T

TPTBusiness 52bee1b35a fix(security): resolve CodeQL path-injection and clear-text-logging alerts

Path injection (#37, #39, #40):
- _safe_resolve() in app.py: return safe_root / candidate.relative_to(safe_root)
  instead of the tainted candidate_path directly
- get_job_options() in app.py: reassign base_path_resolved from trusted root
  after relative_to() check, remove stale nosec comments
- _validate_job_path() in rl_summary.py: return root-derived path and omit
  resolved_job from the error message to avoid information leakage

Clear-text logging (#38):
- eurusd_llm.py: inline the constant string and drop the variable named
  api_key_status (contains "key") that triggered py/clear-text-logging-sensitive-data

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

2026-04-17 21:51:35 +02:00

__init__.py

fix: fix some minor bugs in qlib scenario (#817 )

2025-04-23 18:48:02 +08:00

auto_fixer.py

feat: add daily log rotation, llama health wait, factor auto-fixer, and README updates

2026-04-16 07:20:08 +02:00

config.py

feat: add previous runner loops to runner history (#1142 )

2025-08-04 17:38:27 +08:00

eurusd_debate.py

docs: Translate all code comments to English