TPTBusiness 9f8cf622d8 fix: Prevent path traversal in Streamlit UI app.py ...

- Validate job_folder is within base_path directory
- Use .resolve() and .relative_to() for path validation
- Catch ValueError and RuntimeError for invalid paths
- Show user-friendly error message instead of crashing
- Fixes GitHub Security Alert #5 (py/path-injection)

Path traversal attacks via job_folder parameter are now prevented.

Co-authored-by: Qwen-Coder <qwen-coder@alibabacloud.com>

2026-04-02 22:06:51 +02:00

..

app

fix: Prevent path traversal in Streamlit UI app.py

2026-04-02 22:06:51 +02:00

components

fix: Remove API key logging from eurusd_llm.py

2026-04-02 22:00:53 +02:00

core

feat: add a web UI server (#1345)

2026-03-18 14:04:52 +08:00

oai

feat: add LLM-finetune scenario (#1314)

2026-03-02 19:04:10 +08:00

scenarios

fix: Prevent path traversal in autorl_bench server.py

2026-04-02 22:02:05 +02:00

utils

feat: add a web UI server (#1345)

2026-03-18 14:04:52 +08:00