Files
NexQuant/rdagent/app/finetune
TPTBusiness 848bbafd13 fix: Harden path validation in Job Summary UI to fix CodeQL alert #17
- Validate base_folder against configured log root (FT_LOG_PATH)
- Use consistent safe_root derivation in both sidebar and main content
- Remove fragile string checks ('..', '/', '\') - Path.resolve() + relative_to() handles this
- Show error and abort if path validation fails
- Fixes py/path-injection alert #17
- Preserves existing functionality
2026-04-03 10:46:46 +02:00
..
2025-08-06 12:24:44 +08:00