Guillaume Meyer (The Opinionated Man) d162c5211d fix: sanitize client-supplied filename in HTTP service ...

CodeQL 'uncontrolled data in path expression' (server.py): a name like
'../../x' flowed into Path(tmpdir) / name, letting an upload escape the
request temp dir on write. Sanitize name to its basename in _decode_input
(_safe_name) and refuse any joined path whose parent is not the tmpdir at
the write sites (_tmp_path). Tests cover traversal names.

2026-08-14 15:31:20 -07:00

..

fixtures

chore: finish plan packaging polish

2026-08-11 13:39:14 -07:00

test_audit.py

feat: split skill from service, add HTTP API and Docker distribution

2026-08-14 14:29:31 -07:00

test_binary_guard.py

feat: split skill from service, add HTTP API and Docker distribution

2026-08-14 14:29:31 -07:00

test_c2patool_report.py

feat: split skill from service, add HTTP API and Docker distribution

2026-08-14 14:29:31 -07:00

test_clean_image.py

feat: split skill from service, add HTTP API and Docker distribution

2026-08-14 14:29:31 -07:00

test_clean_text.py

feat: split skill from service, add HTTP API and Docker distribution

2026-08-14 14:29:31 -07:00

test_container_meta.py

feat: split skill from service, add HTTP API and Docker distribution

2026-08-14 14:29:31 -07:00

test_ctrlregen_clean.py

feat: split skill from service, add HTTP API and Docker distribution

2026-08-14 14:29:31 -07:00

test_http_server.py

fix: sanitize client-supplied filename in HTTP service

2026-08-14 15:31:20 -07:00

test_inspect_file.py

feat: split skill from service, add HTTP API and Docker distribution

2026-08-14 14:29:31 -07:00

test_json_exit_code.py

feat: split skill from service, add HTTP API and Docker distribution

2026-08-14 14:29:31 -07:00

test_markdiffusion_harness.py

feat: split skill from service, add HTTP API and Docker distribution

2026-08-14 14:29:31 -07:00

test_markllm_detect.py

feat: split skill from service, add HTTP API and Docker distribution

2026-08-14 14:29:31 -07:00

test_pdf_structural_rewrite.py

feat: split skill from service, add HTTP API and Docker distribution

2026-08-14 14:29:31 -07:00

test_rewrite_text.py

fix: disable chain-of-thought for openai-compatible Layer B rewrites

2026-08-14 15:16:35 -07:00

test_security_hardening.py

feat: split skill from service, add HTTP API and Docker distribution

2026-08-14 14:29:31 -07:00

test_synthid_score.py

feat: split skill from service, add HTTP API and Docker distribution

2026-08-14 14:29:31 -07:00