mirror of
https://github.com/ArchiveBox/ArchiveBox.git
synced 2026-09-14 11:06:13 +05:00
3659adeb7e
Add input validation and path safety checks to prevent path traversal attacks in persona name handling: - Add validate_persona_name() to block dangerous characters (/, \, .., etc) - Add ensure_path_within_personas_dir() to verify resolved paths stay within PERSONAS_DIR - Apply validation at persona creation, renaming, and deletion operations Fixes security issues identified by cubic-dev-ai in PR review. 🤖 Generated with [Claude Code](https://claude.com/claude-code) Co-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com> Co-authored-by: Nick Sweeting <pirate@users.noreply.github.com> |
||
|---|---|---|
| .. | ||
| __init__.py | ||
| archivebox_add.py | ||
| archivebox_archiveresult.py | ||
| archivebox_binary.py | ||
| archivebox_config.py | ||
| archivebox_crawl.py | ||
| archivebox_extract.py | ||
| archivebox_help.py | ||
| archivebox_init.py | ||
| archivebox_install.py | ||
| archivebox_machine.py | ||
| archivebox_manage.py | ||
| archivebox_mcp.py | ||
| archivebox_orchestrator.py | ||
| archivebox_persona.py | ||
| archivebox_pluginmap.py | ||
| archivebox_process.py | ||
| archivebox_remove.py | ||
| archivebox_run.py | ||
| archivebox_schedule.py | ||
| archivebox_search.py | ||
| archivebox_server.py | ||
| archivebox_shell.py | ||
| archivebox_snapshot.py | ||
| archivebox_status.py | ||
| archivebox_tag.py | ||
| archivebox_update.py | ||
| archivebox_version.py | ||
| archivebox_worker.py | ||
| cli_utils.py | ||
| tests_piping.py | ||
| tests.py | ||