mirror of
https://github.com/unslothai/unsloth.git
synced 2026-07-29 17:44:14 +00:00
01f7e14988
* Fix external drive custom folder selection * [pre-commit.ci] auto fixes from pre-commit.com hooks for more information, see https://pre-commit.ci * Update studio/backend/tests/test_linux_external_media_paths.py Co-authored-by: gemini-code-assist[bot] <176961590+gemini-code-assist[bot]@users.noreply.github.com> * [pre-commit.ci] auto fixes from pre-commit.com hooks for more information, see https://pre-commit.ci * Keep legacy media scan validation strict * Apply sensitive-dir denylist to legacy folder browser for PR #6799 The legacy /api/models browse endpoint gained the new /run/media mount roots in its allowlist but not the credential/config guard that scan-folder registration and the Hub browser already enforce. Filter sensitive names during enumeration and reject them in _resolve_browse_target so .ssh, .aws, .config, etc. under allowlisted roots stay unbrowseable, matching the Hub browser. Add a public contains_sensitive_path_component helper and cover the legacy resolver with a regression test. * Trim redundant comments in PR #6799 changes * Skip sensitive Linux media roots * Reject sensitive dirs at exact browse roots for PR #6799 Both _resolve_browse_target functions only checked contains_sensitive_path_component while walking descendant parts, so requesting an allowlisted root itself (empty relative path) returned it unchecked. A pre-existing scan-folder row under ~/.ssh, ~/.aws, ~/.config, etc. (registerable before the denylist was added) is re-added to the allowlist on upgrade and could then be browsed. Check the resolved target once before returning in both the legacy and Hub browsers, and cover the root case in both test suites. * fix: avoid unused path helper reexports * fix: import sensitive path helpers directly * [pre-commit.ci] auto fixes from pre-commit.com hooks for more information, see https://pre-commit.ci --------- Co-authored-by: pre-commit-ci[bot] <66853113+pre-commit-ci[bot]@users.noreply.github.com> Co-authored-by: gemini-code-assist[bot] <176961590+gemini-code-assist[bot]@users.noreply.github.com> Co-authored-by: Daniel Han <danielhanchen@gmail.com> Co-authored-by: imagineer99 <samleejackson0@gmail.com> Co-authored-by: Lee Jackson <130007945+Imagineer99@users.noreply.github.com> |
||
|---|---|---|
| .. | ||
| datasets | ||
| hardware | ||
| inference | ||
| models | ||
| paths | ||
| security | ||
| .gitkeep | ||
| __init__.py | ||
| _studio_release_build.py | ||
| api_errors.py | ||
| cache_cleanup.py | ||
| client_ip.py | ||
| cpu_threads.py | ||
| downsample.py | ||
| embedding_model_settings.py | ||
| helper_precache_settings.py | ||
| hf_xet_fallback.py | ||
| host_policy.py | ||
| lifespan_shutdown.py | ||
| llama_cpp_freshness.py | ||
| llama_cpp_update.py | ||
| mlx_repair.py | ||
| native_path_leases.py | ||
| node_runtime.py | ||
| openai_auto_switch_settings.py | ||
| personalization_settings.py | ||
| preview_rate_limit.py | ||
| preview_sharing_settings.py | ||
| preview_token.py | ||
| process_lifetime.py | ||
| ssm_runtime.py | ||
| studio_version.py | ||
| subprocess_compat.py | ||
| training_runs.py | ||
| transformers_version.py | ||
| update_status.py | ||
| upload_limits.py | ||
| utils.py | ||
| uv_path_safety.py | ||
| wheel_utils.py | ||