TPTBusiness 98098dfa35 fix: Prevent path injection in FT Job Summary UI ...

- Add explicit validation for path traversal sequences (.., /, \)
- Reject job_folder containing path traversal before Path construction
- Fixes CodeQL py/path-injection warning (Alert #18)
- Existing .relative_to() validation remains as defense-in-depth

Security improvements:
- Early rejection of malicious paths before Path() construction
- Clear error message for users
- Maintains existing validation as secondary check

Fixes GitHub Code Scanning Alert #18 (py/path-injection)

2026-04-02 23:05:25 +02:00

..

app

fix: Prevent path injection in FT Job Summary UI

2026-04-02 23:05:25 +02:00

components

feat: Add model loader system (same as prompts)

2026-04-02 22:40:46 +02:00

core

feat: add a web UI server (#1345)

2026-03-18 14:04:52 +08:00

oai

feat: add LLM-finetune scenario (#1314)

2026-03-02 19:04:10 +08:00

scenarios

chore: Document torch CVE-2025-2953 is already fixed

2026-04-02 23:04:09 +02:00

utils

feat: add a web UI server (#1345)

2026-03-18 14:04:52 +08:00