HAL9000
e18ac5f23c
CI / lint (pull_request) Successful in 20s
CI / quality (pull_request) Successful in 21s
CI / push-validation (pull_request) Successful in 20s
CI / build (pull_request) Successful in 24s
CI / typecheck (pull_request) Successful in 50s
CI / security (pull_request) Successful in 59s
CI / helm (pull_request) Successful in 44s
CI / integration_tests (pull_request) Successful in 4m41s
CI / unit_tests (pull_request) Successful in 5m24s
CI / docker (pull_request) Successful in 52s
CI / coverage (pull_request) Successful in 7m38s
CI / e2e_tests (pull_request) Successful in 2m14s
CI / status-check (pull_request) Successful in 1s
CI / benchmark-regression (push) Failing after 0s
CI / benchmark-publish (push) Failing after 0s
CI / lint (push) Successful in 18s
CI / quality (push) Successful in 40s
CI / typecheck (push) Successful in 41s
CI / security (push) Successful in 42s
CI / build (push) Successful in 25s
CI / push-validation (push) Successful in 30s
CI / helm (push) Successful in 56s
CI / e2e_tests (push) Successful in 3m3s
CI / unit_tests (push) Successful in 4m3s
CI / integration_tests (push) Successful in 4m8s
CI / docker (push) Successful in 52s
CI / coverage (push) Successful in 7m22s
CI / status-check (push) Successful in 1s
fix(security): replace startswith sandbox check with Path.relative_to() in validate_path #7558
...
The validate_path() function in file_tools.py used str.startswith() to
verify that a resolved path stays within the sandbox root. This allowed
sibling directories whose names share a string prefix with the sandbox
(e.g. /tmp/sandbox-escape/ bypassing /tmp/sandbox/) to escape the
containment check.
Replace the string prefix check with Path.relative_to(root), which
performs a proper OS-level path prefix comparison using path separators.
Add a Behave regression scenario tagged @tdd_issue @tdd_issue_7558 that
exercises the prefix-collision bypass to prevent regressions.
ISSUES CLOSED : #7558
2026-04-17 04:50:55 +00:00
..
2026-04-05 17:53:56 +00:00
2026-04-03 00:29:46 +00:00
2026-03-31 16:01:58 +00:00
2026-03-31 21:47:12 +00:00
2026-04-03 00:29:46 +00:00
2026-04-05 17:53:56 +00:00
2026-04-04 20:38:16 +00:00
2026-04-05 17:53:56 +00:00
2026-04-05 17:53:56 +00:00
2026-04-05 21:10:14 +00:00
2026-04-02 23:53:13 +00:00
2026-04-01 06:16:41 +00:00
2026-04-01 06:16:41 +00:00
2026-04-05 21:26:33 +00:00
2026-03-26 06:19:14 +00:00
2026-03-31 21:47:12 +00:00
2026-03-30 23:40:36 +01:00
2026-04-05 08:12:32 +00:00
2026-04-05 21:19:40 +00:00
2026-04-05 07:49:49 +00:00
2026-04-05 21:19:40 +00:00
2026-03-26 13:41:31 +00:00
2026-04-05 21:19:40 +00:00
2026-04-05 21:19:40 +00:00
2026-04-05 19:48:40 +00:00
2026-03-31 21:47:12 +00:00
2026-03-28 05:27:14 +00:00
2026-03-28 05:27:14 +00:00
2026-04-05 18:18:08 +00:00
2026-03-26 13:41:31 +00:00
2026-03-31 16:01:58 +00:00
2026-03-31 16:01:58 +00:00
2026-04-02 16:53:03 +00:00
2026-04-04 20:38:16 +00:00
2026-03-30 17:06:49 -04:00
2026-03-31 21:47:12 +00:00
2026-03-27 23:53:22 +00:00
2026-04-04 20:38:16 +00:00
2026-04-02 17:00:53 +00:00
2026-04-02 16:59:07 +00:00
2026-03-22 05:01:06 +00:00
2026-04-02 06:21:49 +00:00
2026-03-30 13:18:07 +01:00
2026-03-30 13:18:07 +01:00
2026-04-05 09:46:16 +00:00
2026-03-30 13:18:07 +01:00
2026-03-30 13:18:07 +01:00
2026-04-01 01:46:37 +00:00
2026-04-15 03:21:05 +00:00
2026-04-05 17:55:54 +00:00
2026-03-21 05:30:01 +00:00
2026-04-05 21:13:07 +00:00
2026-04-05 21:13:07 +00:00
2026-03-31 21:47:12 +00:00
2026-03-30 21:39:26 +00:00
2026-03-31 11:03:20 +00:00
2026-03-23 22:22:16 +00:00
2026-04-02 19:09:04 +00:00
2026-04-05 08:39:14 +00:00
2026-04-05 19:48:40 +00:00
2026-04-02 19:09:04 +00:00
2026-04-02 19:09:04 +00:00
2026-03-31 21:47:12 +00:00
2026-04-02 19:09:04 +00:00
2026-04-05 08:39:14 +00:00
2026-04-05 19:48:40 +00:00
2026-03-22 05:01:06 +00:00
2026-03-31 21:47:12 +00:00
2026-04-01 06:16:41 +00:00
2026-04-05 19:48:40 +00:00
2026-04-05 19:48:40 +00:00
2026-03-31 21:47:12 +00:00
2026-03-22 05:01:06 +00:00
2026-04-05 19:48:40 +00:00
2026-03-31 21:47:12 +00:00
2026-03-30 21:48:01 +00:00
2026-03-30 21:48:01 +00:00
2026-04-05 04:33:46 +00:00
2026-04-05 04:33:46 +00:00
2026-03-27 12:57:03 +00:00
2026-03-24 08:46:58 +00:00
2026-04-05 20:56:32 +00:00
2026-04-09 13:00:47 +00:00
2026-03-25 17:49:06 +00:00
2026-04-15 00:24:13 +00:00
2026-03-30 21:39:26 +00:00
2026-03-29 16:23:04 +01:00
2026-03-30 17:06:49 -04:00
2026-03-31 21:47:12 +00:00
2026-04-02 16:59:40 +00:00
2026-04-05 04:09:27 +00:00
2026-04-02 08:31:27 +00:00
2026-04-05 10:17:24 +00:00
2026-04-02 16:58:36 +00:00
2026-03-31 11:03:20 +00:00
2026-04-04 20:38:16 +00:00
2026-03-31 21:47:12 +00:00
2026-03-26 07:52:09 +00:00
2026-04-04 20:38:16 +00:00
2026-03-30 23:40:36 +01:00
2026-03-30 23:40:36 +01:00
2026-03-30 23:40:36 +01:00
2026-04-04 20:38:16 +00:00
2026-03-31 21:47:12 +00:00
2026-04-01 06:16:41 +00:00
2026-04-04 20:38:16 +00:00
2026-03-31 21:47:12 +00:00
2026-04-02 17:08:52 +00:00
2026-04-08 11:02:14 +00:00
2026-04-05 21:06:04 +00:00
2026-03-27 23:53:22 +00:00
2026-04-03 02:01:45 +00:00
2026-04-08 11:02:14 +00:00
2026-04-04 20:38:16 +00:00
2026-04-02 17:07:48 +00:00
2026-04-02 16:53:03 +00:00
2026-04-02 16:59:07 +00:00
2026-03-31 16:01:58 +00:00
2026-03-31 11:31:00 +00:00
2026-03-31 21:47:12 +00:00
2026-03-31 16:01:58 +00:00
2026-03-31 21:47:12 +00:00
2026-03-30 13:19:08 +00:00
2026-04-02 16:58:39 +00:00
2026-04-05 17:49:20 +00:00
2026-03-24 22:01:48 +00:00
2026-03-31 21:47:12 +00:00
2026-03-24 22:01:48 +00:00
2026-03-31 21:47:12 +00:00
2026-03-31 21:47:12 +00:00
2026-04-09 14:17:50 +00:00
2026-04-05 08:29:55 +00:00
2026-03-29 18:57:15 +01:00
2026-04-05 18:20:15 +00:00
2026-04-05 18:20:15 +00:00
2026-04-05 05:46:05 +00:00
2026-04-02 16:59:14 +00:00
2026-04-05 08:26:50 +00:00
2026-03-30 09:21:51 +00:00
2026-03-27 11:10:56 +00:00
2026-04-02 16:58:32 +00:00
2026-03-31 21:47:12 +00:00
2026-03-30 11:51:27 +00:00
2026-03-31 21:47:12 +00:00
2026-03-24 13:01:12 +00:00
2026-04-02 16:52:33 +00:00
2026-04-05 07:06:53 +00:00
2026-03-24 13:01:12 +00:00
2026-03-31 21:47:12 +00:00
2026-04-04 23:48:02 +00:00
2026-04-02 16:52:33 +00:00
2026-03-31 21:47:12 +00:00
2026-04-02 19:09:04 +00:00
2026-04-02 16:53:03 +00:00
2026-04-04 20:38:16 +00:00
2026-04-04 20:38:16 +00:00
2026-03-30 13:18:07 +01:00
2026-03-30 17:48:48 +00:00
2026-03-31 21:47:12 +00:00
2026-03-31 21:47:12 +00:00
2026-04-05 07:48:02 +00:00
2026-03-30 22:42:15 +00:00
2026-03-30 22:42:15 +00:00
2026-03-30 23:40:36 +01:00
2026-04-02 16:58:36 +00:00
2026-03-30 19:52:51 +00:00
2026-03-31 21:47:12 +00:00
2026-03-29 18:57:15 +01:00
2026-04-02 17:08:38 +00:00
2026-04-02 17:07:41 +00:00
2026-04-02 19:09:04 +00:00
2026-04-02 19:09:04 +00:00
2026-04-09 14:17:50 +00:00
2026-04-09 14:17:50 +00:00
2026-04-05 19:46:23 +00:00
2026-04-04 20:38:16 +00:00
2026-04-02 19:09:04 +00:00
2026-03-31 01:49:16 +00:00
2026-04-05 21:11:36 +00:00
2026-04-02 19:09:04 +00:00
2026-03-30 17:06:49 -04:00
2026-04-14 19:26:49 +00:00
2026-04-05 20:46:24 +00:00
2026-04-05 19:48:40 +00:00
2026-04-10 18:57:41 +01:00
2026-04-02 19:09:04 +00:00
2026-04-09 14:17:50 +00:00
2026-03-30 23:40:36 +01:00
2026-03-23 23:33:33 +00:00
2026-03-30 13:18:07 +01:00
2026-03-31 21:47:12 +00:00
2026-04-01 04:27:09 +00:00
2026-03-30 13:18:07 +01:00
2026-04-03 13:38:33 -04:00
2026-04-04 20:38:16 +00:00
2026-03-23 23:33:33 +00:00
2026-03-30 23:40:36 +01:00
2026-04-04 20:38:16 +00:00
2026-04-05 04:38:31 +00:00
2026-04-03 00:01:48 +00:00
2026-04-09 06:11:39 +00:00
2026-04-05 19:48:40 +00:00
2026-03-30 23:40:36 +01:00
2026-04-15 06:37:18 +00:00
2026-04-02 21:30:05 +00:00
2026-04-15 06:37:18 +00:00
2026-04-04 20:38:16 +00:00
2026-04-10 18:59:10 +00:00
2026-03-22 05:01:06 +00:00
2026-04-05 08:22:36 +00:00
2026-03-30 17:12:20 +00:00
2026-03-30 08:42:48 +00:00
2026-03-30 14:33:28 +00:00
2026-03-30 14:33:28 +00:00
2026-03-31 21:47:12 +00:00
2026-04-05 18:00:27 +00:00
2026-03-31 21:47:12 +00:00
2026-03-30 10:18:19 +00:00
2026-03-30 10:18:19 +00:00
2026-03-25 13:05:04 +00:00
2026-03-30 23:40:36 +01:00
2026-03-30 23:40:36 +01:00
2026-03-30 23:40:36 +01:00
2026-03-30 13:18:07 +01:00
2026-03-31 21:47:12 +00:00
2026-04-02 08:31:27 +00:00
2026-04-02 08:31:27 +00:00
2026-04-04 20:38:16 +00:00
2026-04-01 13:02:24 +00:00
2026-04-04 20:38:16 +00:00
2026-04-04 20:38:16 +00:00
2026-03-31 21:47:12 +00:00
2026-04-05 18:13:11 +00:00
2026-04-08 11:02:14 +00:00
2026-04-05 07:29:35 +00:00
2026-04-02 08:31:27 +00:00
2026-03-30 13:44:54 +00:00
2026-04-05 09:03:32 +00:00
2026-03-24 13:21:12 +00:00
2026-04-05 08:04:27 +00:00
2026-03-31 21:47:12 +00:00
2026-03-28 00:57:51 +00:00
2026-04-02 16:53:03 +00:00
2026-03-29 18:57:15 +01:00
2026-03-29 18:57:15 +01:00
2026-03-31 21:47:12 +00:00
2026-03-29 18:57:15 +01:00
2026-04-05 04:37:45 +00:00
2026-03-21 04:46:45 +00:00
2026-04-02 17:00:53 +00:00
2026-03-30 13:18:07 +01:00
2026-03-27 23:53:22 +00:00
2026-04-04 20:38:16 +00:00
2026-04-04 23:08:32 +00:00
2026-04-04 23:08:32 +00:00
2026-03-31 21:47:12 +00:00
2026-04-05 07:28:12 +00:00
2026-04-05 21:12:13 +00:00
2026-04-05 19:48:40 +00:00
2026-04-05 09:38:43 +00:00
2026-04-05 18:19:19 +00:00
2026-04-04 20:38:16 +00:00
2026-04-05 07:15:48 +00:00
2026-04-05 21:11:53 +00:00
2026-04-05 19:48:40 +00:00
2026-04-05 19:48:40 +00:00
2026-04-05 19:48:40 +00:00
2026-04-08 11:02:14 +00:00
2026-04-17 03:56:35 +00:00
2026-03-31 23:57:39 +00:00
2026-04-05 07:18:27 +00:00
2026-03-28 05:27:14 +00:00
2026-03-28 05:27:14 +00:00
2026-04-03 19:00:22 +00:00
2026-04-02 16:50:50 +00:00
2026-03-27 05:58:35 +00:00
2026-04-06 07:55:09 +00:00
2026-04-05 08:22:45 +00:00
2026-04-02 16:51:15 +00:00
2026-03-27 05:58:35 +00:00
2026-04-02 16:51:29 +00:00
2026-04-05 17:52:59 +00:00
2026-03-28 00:30:26 +00:00
2026-03-27 05:58:35 +00:00
2026-03-26 01:02:10 +00:00
2026-03-27 22:53:33 +00:00
2026-03-27 05:58:35 +00:00
2026-04-15 13:37:16 +08:00
2026-04-05 07:39:57 +00:00
2026-03-27 05:58:35 +00:00
2026-03-27 05:58:35 +00:00
2026-04-03 03:58:45 +00:00
2026-04-03 19:03:15 +00:00
2026-03-28 04:15:49 +00:00
2026-04-02 19:09:04 +00:00
2026-04-01 00:40:46 +00:00
2026-03-30 17:06:49 -04:00
2026-04-09 14:17:50 +00:00
2026-03-27 05:58:35 +00:00
2026-04-13 21:16:55 +00:00
2026-04-10 05:21:24 +00:00
2026-03-27 05:58:35 +00:00
2026-03-27 05:58:35 +00:00
2026-04-04 20:38:16 +00:00
2026-03-27 05:58:35 +00:00
2026-03-27 05:58:35 +00:00
2026-03-22 01:54:33 +00:00
2026-03-27 05:58:35 +00:00
2026-03-27 05:58:35 +00:00
2026-03-27 05:58:35 +00:00
2026-03-27 05:58:35 +00:00
2026-04-08 11:02:14 +00:00
2026-04-01 04:27:09 +00:00
2026-03-31 07:42:06 +00:00
2026-04-02 23:53:13 +00:00
2026-04-02 23:59:37 +00:00
2026-04-17 04:50:55 +00:00
2026-04-06 07:55:09 +00:00
2026-04-02 16:53:03 +00:00
2026-04-05 04:19:52 +00:00
2026-04-02 16:53:03 +00:00
2026-04-06 07:55:09 +00:00
2026-04-02 17:07:26 +00:00
2026-04-02 17:07:26 +00:00
2026-04-02 17:07:26 +00:00
2026-03-31 11:31:00 +00:00
2026-04-06 07:55:09 +00:00
2026-03-29 18:57:15 +01:00
2026-04-01 21:51:14 +00:00
2026-04-05 18:08:09 +00:00
2026-04-04 20:38:16 +00:00
2026-04-05 18:08:09 +00:00
2026-04-05 18:09:41 +00:00
2026-04-03 05:56:27 +00:00
2026-04-02 17:08:13 +00:00
2026-04-05 17:52:30 +00:00
2026-04-02 20:48:33 +00:00
2026-04-01 09:23:21 +00:00
2026-04-05 17:50:51 +00:00
2026-04-05 17:50:51 +00:00
2026-04-03 05:56:27 +00:00
2026-04-02 17:09:15 +00:00
2026-04-06 07:55:09 +00:00
2026-04-05 17:52:59 +00:00
2026-03-31 21:47:12 +00:00
2026-04-01 03:30:00 +00:00
2026-04-04 20:38:16 +00:00
2026-03-30 11:47:37 +08:00