brett/cross-py-builder
1
0
Fork 0
mirror of https://github.com/blw1138/cross-py-builder.git synced 2026-09-07 21:41:09 -05:00
Code Issues Actions Packages Projects Releases Wiki Activity

Harden build agent against path traversal and add job cleanup

Browse Source 
- Validate job IDs on /download and /delete; reject invalid identifiers
- Prevent zip-slip during /upload extraction via safe_extract
- Basename uploaded filenames in /update to block path traversal
- Route git-checkout jobs into pybuild-data so they can be downloaded/deleted
- Clean up job dirs on extract, checkout, and build failures
- Ignore Python bytecode and egg-info artifacts
This commit is contained in:
Brett Williams
2026-08-30 21:24:54 -05:00
parent b511962a1f
commit 1902d36ae7
2 changed files with 64 additions and 35 deletions
Download Patch File Download Diff File Expand all files Collapse all files
.gitignore
+4 -1
View File
@@ -1 +1,4 @@
known_hosts
known_hosts
__pycache__/
*.py[cod]
*.egg-info/