mirror of
https://github.com/lfnovo/open-notebook.git
synced 2026-04-28 03:19:59 +00:00
- Bump ai-prompter to >=0.4.0 which uses Jinja2 SandboxedEnvironment, preventing arbitrary code execution via user-provided transformation prompts - Sanitize uploaded filenames with os.path.basename() and validate resolved path stays within upload directory to prevent path traversal - Validate file_path in source creation is within UPLOADS_FOLDER to prevent arbitrary file read via Local File Inclusion |
||
|---|---|---|
| .. | ||
| conftest.py | ||
| README.md | ||
| test_chunking.py | ||
| test_credentials_api.py | ||
| test_domain.py | ||
| test_embedding.py | ||
| test_graphs.py | ||
| test_models_api.py | ||
| test_notes_api.py | ||
| test_podcast_path.py | ||
| test_sources_api.py | ||
| test_url_validation.py | ||
| test_utils.py | ||
Coming Soon