open-notebook/tests
Luis Novo 70a466a640 fix: prevent RCE via SSTI, path traversal file write, and LFI file read
- Bump ai-prompter to >=0.4.0 which uses Jinja2 SandboxedEnvironment,
  preventing arbitrary code execution via user-provided transformation prompts
- Sanitize uploaded filenames with os.path.basename() and validate resolved
  path stays within upload directory to prevent path traversal
- Validate file_path in source creation is within UPLOADS_FOLDER to prevent
  arbitrary file read via Local File Inclusion
2026-04-09 11:58:16 -03:00
..
conftest.py feat: credential-based API key management (#477) (#540) 2026-02-10 08:30:22 -03:00
README.md Initial commit with all features 2024-10-21 14:56:10 -03:00
test_chunking.py feat: credential-based API key management (#477) (#540) 2026-02-10 08:30:22 -03:00
test_credentials_api.py refactor: move tests from test_bug_fixes.py to proper test modules 2026-04-06 07:45:49 -03:00
test_domain.py fix: handle empty/whitespace source content without retry loop (#576) 2026-02-14 18:09:07 -03:00
test_embedding.py fix: embedding batch sizing and 413 error classification (1.7.4) 2026-02-18 11:39:47 -03:00
test_graphs.py refactor: move tests from test_bug_fixes.py to proper test modules 2026-04-06 07:45:49 -03:00
test_models_api.py Feat/localization tests docker (#371) 2026-01-15 13:51:05 -03:00
test_notes_api.py feat: expose embed command_id in note API responses (#545) 2026-02-14 18:11:23 -03:00
test_podcast_path.py fix: extract build_episode_output_dir helper and test production code 2026-03-11 17:05:42 -05:00
test_sources_api.py fix: prevent RCE via SSTI, path traversal file write, and LFI file read 2026-04-09 11:58:16 -03:00
test_url_validation.py feat: credential-based API key management (#477) (#540) 2026-02-10 08:30:22 -03:00
test_utils.py fix: handle tiktoken network errors in offline environments (issue #264) 2026-03-10 19:45:14 -05:00

Coming Soon