TPTBusiness 7a9df5c3d8 fix: Improve path traversal prevention with dedicated helper function ...

- Add _safe_resolve_path() helper function for path validation
- Centralizes path security logic for reuse across codebase
- Comprehensive validation: null bytes, drive letters, absolute paths, path traversal
- Uses relative_to() check to prevent path traversal attacks
- Refactor resolve_model_path() to use the new helper function

Fixes CodeQL alert #10: Uncontrolled data used in path expression

The new helper function makes the security check more explicit,
which helps CodeQL recognize the path validation.

2026-04-02 23:06:29 +02:00

..

app

fix: Refactor path validation to fix CodeQL alert #16

2026-04-02 23:05:42 +02:00

components

feat: Add model loader system (same as prompts)

2026-04-02 22:40:46 +02:00

core

feat: add a web UI server (#1345)

2026-03-18 14:04:52 +08:00

oai

feat: add LLM-finetune scenario (#1314)

2026-03-02 19:04:10 +08:00

scenarios

fix: Improve path traversal prevention with dedicated helper function

2026-04-02 23:06:29 +02:00

utils

feat: add a web UI server (#1345)

2026-03-18 14:04:52 +08:00