TPTBusiness 820c27f91b fix: Harden _safe_resolve to fix CodeQL alert #3 ...

- Use os.path.realpath for full resolution (handles symlinks and ..)
- Reject drive letters explicitly via os.path.splitdrive
- Reject absolute paths via os.path.isabs (not Path.is_absolute)
- Build candidate via os.path.join then resolve
- Validate with Path.relative_to after realpath resolution
- Fixes py/path-injection alert #3
- Preserves existing functionality

2026-04-03 10:48:43 +02:00

..

benchmark

feat(backend): integrate LiteLLM API Backend (#564)

2025-02-13 15:16:18 +08:00

CI

fix mypy error (#91)

2024-07-25 15:20:04 +08:00

data_science

feat: add a web UI server (#1345)

2026-03-18 14:04:52 +08:00

finetune

fix: Harden path validation in Job Summary UI to fix CodeQL alert #17

2026-04-03 10:46:46 +02:00

general_model

chore: remove redundant tag in old scenarios (#917)

2025-06-13 17:49:58 +08:00

kaggle

feat: add option to enable hyperparameter tuning only in first eval loop (#1211)

2025-08-29 16:59:22 +08:00

qlib_rd_loop

feat: EURUSD Trading-Verbesserungen implementiert (Phase 1)

2026-03-30 19:56:26 +02:00

rl

fix: Harden _safe_resolve to fix CodeQL alert #3

2026-04-03 10:48:43 +02:00

utils

feat: add a web UI server (#1345)

2026-03-18 14:04:52 +08:00

cli.py

feat: Beautiful CLI dashboard + corrected start command

2026-04-02 19:21:08 +02:00