TPTBusiness c2a50feb56 fix(security): replace shell=True subprocess calls with list args (B602) ...

- factor.py: check_output([python_bin, path]) instead of shell string
- env.py QlibCondaEnv: all four conda commands use list args

Shell=True with a constructed string allows shell injection if
python_bin or path contain shell metacharacters.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

2026-04-30 09:35:09 +02:00

..

__init__.py

fix: fix some minor bugs in qlib scenario (#817)

2025-04-23 18:48:02 +08:00

auto_fixer.py

fix(auto-fixer): replace zero \$volume with price-range proxy for FX data

2026-04-27 16:07:06 +02:00

config.py

feat: add previous runner loops to runner history (#1142)

2025-08-04 17:38:27 +08:00

eurusd_debate.py

docs: Translate all code comments to English

2026-04-02 20:21:59 +02:00

eurusd_llm.py

fix(security): resolve CodeQL path-injection and clear-text-logging alerts

2026-04-17 21:51:35 +02:00

eurusd_macro.py

fix(security): Patch path injection and stack trace exposure (CodeQL #31, #27)

2026-04-11 21:50:16 +02:00

eurusd_memory.py

docs: Translate all code comments to English

2026-04-02 20:21:59 +02:00

eurusd_reflection.py

docs: Translate all code comments to English

2026-04-02 20:21:59 +02:00

eurusd_regime.py

docs: Translate all code comments to English

2026-04-02 20:21:59 +02:00

eurusd_risk.py

docs: Remove 'Inspired by' comments and add comprehensive Acknowledgments

2026-04-02 20:16:54 +02:00

eva_utils.py

feat: Fix 1min data integration and centralize all prompts

2026-04-04 08:20:58 +02:00

evaluators.py

refactor: remove unused code and update documentation in CoSTEER module (#720)

2025-03-26 22:48:01 +08:00

evolving_strategy.py

feat: add daily log rotation, llama health wait, factor auto-fixer, and README updates

2026-04-16 07:20:08 +02:00

factor_execution_template.txt

fix: improve_execution_time_in_kaggle_loop (#279)

2024-09-20 12:07:13 +08:00

factor.py

fix(security): replace shell=True subprocess calls with list args (B602)

2026-04-30 09:35:09 +02:00

fx_config.py

feat: Auto-start dashboard for fin_quant

2026-04-02 19:17:03 +02:00

prompts.yaml

fix(loop): compress old experiment history in proposal prompt to reduce context size

2026-04-25 09:10:39 +02:00