Commit Graph
2 Commits
Author SHA1 Message Date
Brett Williams 1902d36ae7 Harden build agent against path traversal and add job cleanup
- Validate job IDs on /download and /delete; reject invalid identifiers
- Prevent zip-slip during /upload extraction via safe_extract
- Basename uploaded filenames in /update to block path traversal
- Route git-checkout jobs into pybuild-data so they can be downloaded/deleted
- Clean up job dirs on extract, checkout, and build failures
- Ignore Python bytecode and egg-info artifacts
2026-08-30 21:24:54 -05:00
Brett Williams cdbee30109 Initial commit 2025-03-05 16:45:21 -06:00