Skip to content

fix(backend): restrict file access to registered task images - #253

Closed
Ataraxy33 wants to merge 1 commit into
zai-org:mainfrom
Ataraxy33:main
Closed

Ataraxy33 wants to merge 1 commit into
zai-org:mainfrom
Ataraxy33:main

Conversation

@Ataraxy33

Copy link
Copy Markdown
Contributor

Validate completed-task PNG artifacts and share checks between legacy and task-image endpoints. Preserve image previews, default local listeners to loopback, and document deployment access controls.

Add 86 security and pipeline regression cases covering traversal, symlinks, manifests, relative output directories, and image/PDF previews.

Validate completed-task PNG artifacts and share checks between legacy and task-image endpoints. Preserve image previews, default local listeners to loopback, and document deployment access controls.

Add 86 security and pipeline regression cases covering traversal, symlinks, manifests, relative output directories, and image/PDF previews.
@Ataraxy33 Ataraxy33 closed this Oct 13, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant