TPTBusiness 79f1d34083 fix(security): resolve path-injection and add nosec for safe temp paths (B108, py/path-injection) ...

- ds_trace.py: resolve() user-provided save path and use Path.name for filenames
  to prevent directory traversal in the local workspace save UI
- rl/finetune UI data_loaders: nosec B614 where paths are already validated
  against safe_root via realpath() before use
- Temp paths (/tmp/sample, /tmp/full, /tmp/mock/*, /tmp/predix_loop.pid,
  /tmp/autorl_output): nosec B108 — fixed Docker volume mount points or
  single-process admin files, not user-writable attack surface

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

2026-04-30 19:26:38 +02:00

..

app.py

fix(security): nosec for B608/B701 false positives in UI and template code

2026-04-30 09:35:09 +02:00

ds_trace.py

fix(security): resolve path-injection and add nosec for safe temp paths (B108, py/path-injection)

2026-04-30 19:26:38 +02:00

llm_st.py

fix(security): nosec for B608/B701 false positives in UI and template code

2026-04-30 09:35:09 +02:00