masci / banks / 28851132359

Builds Branch Commit Type Ran Committer Via Coverage
28851132359 main fix: validate prompt paths in DirectoryPromptRegistry (#77) * fix: validate prompt paths in DirectoryPromptRegistry Prevent path traversal when resolving prompt file names and versions, and reject poisoned index entries that escape the registry ... push web-flow github
94.61
28850132171 fix/directory-registry-path-validation Merge 1ddabc27d into 3ab65baca Pull #77 web-flow github
94.61
28849815681 fix/directory-registry-path-validation Merge 8cf68b30e into 3ab65baca Pull #77 web-flow github
94.75
28243335110 main fix: restrict media filter file paths to the current working directory (#76) * fix: restrict media filter file paths to the current working directory Resolves absolute and traversal paths by canonicalizing them and verifying they stay within CWD... push web-flow github
94.57
28242516066 fix/media-path-validation Merge 2e8227a82 into 1ef6c8739 Pull #76 web-flow github
94.57
28233796943 fix/media-path-validation Merge 9606d8673 into 1ef6c8739 Pull #76 web-flow github
94.87
27767342822 main fix: resolve tool callables from an explicit registry instead of importlib (#75) The `tool` filter now registers each callable by name in `CompletionExtension._callable_registry` at render time. `_get_tool_callable` looks up callables exclusively... push web-flow github
94.8
27755681025 fix/safe-tool-callable-resolution Merge 3a89ee2df into 3c9d09ddc Pull #75 web-flow github
94.8
24994328106 main fix: prevent SSTI by switching to SandboxedEnvironment (#74) * docs: warn that prompt templates are trusted code Templates are rendered in an unsandboxed Jinja2 environment, so passing untrusted user input as template text allows arbitrary code ... push web-flow github
94.77
24993963446 docs/template-security-warning Merge 65e591559 into 1aed53841 Pull #74 web-flow github
94.77
22861539457 copilot/migrate-project-config-away-from-hatch Merge 451926d84 into 1aed53841 Pull #73 web-flow github
94.76
22861362601 copilot/migrate-project-config-away-from-hatch Merge 5d395f6c1 into 1aed53841 Pull #73 web-flow github
94.76
22861306802 copilot/migrate-project-config-away-from-hatch Merge 835f63cc4 into 1aed53841 Pull #73 web-flow github
94.76
22857098836 copilot/migrate-project-config-away-from-hatch Merge c0b731d65 into 1aed53841 Pull #73 web-flow github
94.76
22096426347 main Add backfordward support for Python 3.9 (#71) Co-authored-by: Massimiliano Pippi <mpippi@gmail.com> push web-flow github
94.76