TPTBusiness d0d854f7ee fix: Harden path validation to fix CodeQL alert #20 ...

- Use os.path.commonpath for normalized prefix comparison
- Ensure resolved path is absolute before validation
- Add explicit string comparison for safe_root containment
- Fixes py/path-injection alert #20
- Preserves existing functionality

2026-04-03 10:44:44 +02:00

..

app

fix: Harden path validation to fix CodeQL alert #20

2026-04-03 10:44:44 +02:00

components

fix: Rename loader.py to prompt_loader.py to fix module conflict

2026-04-03 08:04:04 +02:00

core

feat: add a web UI server (#1345)

2026-03-18 14:04:52 +08:00

oai

feat: add LLM-finetune scenario (#1314)

2026-03-02 19:04:10 +08:00

scenarios

fix: Improve path traversal prevention with dedicated helper function

2026-04-02 23:06:29 +02:00

utils

feat: add a web UI server (#1345)

2026-03-18 14:04:52 +08:00