TPTBusiness 732361bb90 fix(security): resolve path-injection, B701, B101, B112 Bandit alerts ...

- Path injection (B614): centralized safe_resolve_path in core/utils.py,
  refactored 6 UI modules to use it with safe_root validation
- B701: added explicit autoescape=select_autoescape() to Jinja2
  Environment() calls in 3 files
- B101: replaced assert statements with proper if/raise patterns in
  12+ files (partial)
- B112: added logger.warning() to bare except:continue blocks in
  5 files

2026-05-01 13:42:59 +02:00

..

agent

fix(security): resolve path-injection, B701, B101, B112 Bandit alerts

2026-05-01 13:42:59 +02:00

blob

feat: add LLM-finetune scenario (#1314)

2026-03-02 19:04:10 +08:00

repo

refactor: Use file dictionaries for diff generation in feedback module (#574)

2025-02-10 09:03:13 +08:00

workflow

fix(security): resolve path-injection, B701, B101, B112 Bandit alerts

2026-05-01 13:42:59 +02:00

__init__.py

fix(security): Patch 5 CodeQL path injection and weak hashing alerts (#25-#30)

2026-04-11 21:54:27 +02:00

env.py

fix(security): replace shell=True subprocess calls with list args in env.py (B602)

2026-04-30 19:26:29 +02:00

fmt.py

fix: fix the bug in the regular expression matching for stdout (#890)

2025-05-23 14:13:31 +08:00

prompts.yaml

fix: update fallback criterion (#1210)

2025-08-29 17:07:41 +08:00

qlib.py

feat: add a web UI server (#1345)

2026-03-18 14:04:52 +08:00