masci/banks | Coveralls - Test Coverage History & Statistics

LAST BUILD ON BRANCH main
branch: SELECT

CHANGE BRANCH
x

No branch selected

clelia/add-pydantic-input-and-xml-filter

copilot/migrate-project-config-away-from-hatch

docs/rename-claude-to-agents

docs/template-security-warning

feat-accept-bytes-for-filters

feat-support-documents

feat-support-video

fix-unknown-role-error-message

fix/directory-registry-path-validation

fix/media-path-validation

fix/safe-tool-callable-resolution

issue_70

logan/fix-deps

logan/fix_content_block_parsing

logan/optional_deps

main

massi/3.9

massi/34

massi/36

massi/54

massi/56

massi/58

massi/audio

massi/audio-filter

massi/audiourl

massi/bump-python

massi/deps

massi/fix-latest-hatch-lint

massi/img-bug

massi/typos

massi/xml-support

patch-1

update-readme-chat-example

Committed 07 Jul 2026 08:03AM UTC coverage: 94.607% (+0.04%) from 94.568%

Build # 28851132359

Build Type

push

github

Committed by

web-flow

Commit Message

fix: validate prompt paths in DirectoryPromptRegistry (#77)

* fix: validate prompt paths in DirectoryPromptRegistry

Prevent path traversal when resolving prompt file names and versions,
and reject poisoned index entries that escape the registry root.

Co-authored-by: Cursor <cursoragent@cursor.com>

* fix: reject dot-segments in prompt names and versions

Reject "." and ".." path parts in prompt names and path separators in
versions before resolving file paths, preventing overwrite bypass via
equivalent paths like team/../nested.

Co-authored-by: Cursor <cursoragent@cursor.com>

---------

Co-authored-by: Cursor <cursoragent@cursor.com>

Coverage Stats

111 of 117 branches covered (94.87%)

Branch coverage included in aggregate %.

20 of 24 new or added lines in 1 file covered. (83.33%)

889 of 940 relevant lines covered (94.57%)

0.95 hits per line

Relevant lines Covered

940 RELEVANT LINES 889 COVERED LINES

0.95 HITS PER LINE

Source Files on main

Recent builds

Builds	Branch	Commit	Type	Ran	Committer	Via	Coverage
28851132359	main	fix: validate prompt paths in DirectoryPromptRegistry (#77) * fix: validate prompt paths in DirectoryPromptRegistry Prevent path traversal when resolving prompt file names and versions, and reject poisoned index entries that escape the registry ...	push	07 Jul 2026 08:05AM UTC	web-flow	github	94.61
28850132171	fix/directory-registry-path-validation	Merge 1ddabc27d into 3ab65baca	Pull #77	07 Jul 2026 07:46AM UTC	web-flow	github	94.61
28849815681	fix/directory-registry-path-validation	Merge 8cf68b30e into 3ab65baca	Pull #77	07 Jul 2026 07:40AM UTC	web-flow	github	94.75
28243335110	main	fix: restrict media filter file paths to the current working directory (#76) * fix: restrict media filter file paths to the current working directory Resolves absolute and traversal paths by canonicalizing them and verifying they stay within CWD...	push	26 Jun 2026 02:09PM UTC	web-flow	github	94.57
28242516066	fix/media-path-validation	Merge 2e8227a82 into 1ef6c8739	Pull #76	26 Jun 2026 01:55PM UTC	web-flow	github	94.57
28233796943	fix/media-path-validation	Merge 9606d8673 into 1ef6c8739	Pull #76	26 Jun 2026 11:00AM UTC	web-flow	github	94.87
27767342822	main	fix: resolve tool callables from an explicit registry instead of importlib (#75) The `tool` filter now registers each callable by name in `CompletionExtension._callable_registry` at render time. `_get_tool_callable` looks up callables exclusively...	push	18 Jun 2026 02:41PM UTC	web-flow	github	94.8
27755681025	fix/safe-tool-callable-resolution	Merge 3a89ee2df into 3c9d09ddc	Pull #75	18 Jun 2026 11:17AM UTC	web-flow	github	94.8
24994328106	main	fix: prevent SSTI by switching to SandboxedEnvironment (#74) * docs: warn that prompt templates are trusted code Templates are rendered in an unsandboxed Jinja2 environment, so passing untrusted user input as template text allows arbitrary code ...	push	27 Apr 2026 12:14PM UTC	web-flow	github	94.77
24993963446	docs/template-security-warning	Merge 65e591559 into 1aed53841	Pull #74	27 Apr 2026 12:06PM UTC	web-flow	github	94.77

See All Builds (161)

masci / banks
95%

README BADGES
x

Markdown

Textile

RDoc

HTML

Rst

CHANGE BRANCH
x

Relevant lines Covered

Source Files on main

Recent builds

masci / banks 95%

README BADGES x

Markdown

Textile

RDoc

HTML

Rst

CHANGE BRANCH x

Relevant lines Covered

Source Files on main

Recent builds

masci / banks
95%

README BADGES
x

CHANGE BRANCH
x