liqiang-fit2cloud
|
b943567fdf
|
fix: deny access to local services by IPv6 and IPv6-mapped IPv4 addresses for sandbox.
sync2gitee / repo-sync (push) Has been cancelled
Typos Check / Spell Check with Typos (push) Has been cancelled
|
2025-12-18 11:21:46 +08:00 |
|
liqiang-fit2cloud
|
92167a980f
|
fix: deny access to local services by IPv6 and IPv6-mapped IPv4 addresses for sandbox.
|
2025-12-18 11:21:46 +08:00 |
|
liqiang-fit2cloud
|
d68acede6f
|
refactor: change error number.
|
2025-12-09 19:02:49 +08:00 |
|
liqiang-fit2cloud
|
1deea980ee
|
refactor: change error number.
|
2025-12-08 11:29:54 +08:00 |
|
liqiang-fit2cloud
|
4d0ac41a97
|
refactor: change dir permission.
|
2025-12-05 13:21:26 +08:00 |
|
liqiang-fit2cloud
|
d4bd49ba9d
|
refactor: change dir permission.
|
2025-12-05 12:36:33 +08:00 |
|
liqiang-fit2cloud
|
71f1e26c8f
|
refactor: run python code without su -.
|
2025-12-03 09:52:02 +08:00 |
|
liqiang-fit2cloud
|
e04d7d7cd4
|
refactor: add comment.
|
2025-12-02 18:40:49 +08:00 |
|
liqiang-fit2cloud
|
ee539322ad
|
feat: banned host support CIDR.
|
2025-12-02 16:58:07 +08:00 |
|
liqiang-fit2cloud
|
cf59cca8bd
|
fix: change dir permission.
|
2025-11-28 14:14:31 +08:00 |
|
liqiang-fit2cloud
|
64561a7b67
|
fix: forbid sandbox to replace process, only creating is permitted
|
2025-11-28 11:22:38 +08:00 |
|
liqiang-fit2cloud
|
f67aef11fd
|
fix: os.execvp() can create subprocess.
sync2gitee / repo-sync (push) Waiting to run
Typos Check / Spell Check with Typos (push) Waiting to run
|
2025-11-27 20:11:38 +08:00 |
|
liqiang-fit2cloud
|
3bfe400d70
|
build: fix gcc error in arm64.
|
2025-11-27 16:08:58 +08:00 |
|
liqiang-fit2cloud
|
916a8fe67c
|
deps: upgrade redis-server.
|
2025-11-27 15:53:49 +08:00 |
|
liqiang-fit2cloud
|
2d0e0b45c4
|
deps: upgrade redis-server.
|
2025-11-27 15:46:20 +08:00 |
|
liqiang-fit2cloud
|
715adc13c5
|
deps: upgrade redis-server.
|
2025-11-27 15:41:51 +08:00 |
|
liqiang-fit2cloud
|
af9bf0d99c
|
refactor: change lib dir.
|
2025-11-27 10:52:42 +08:00 |
|
liqiang-fit2cloud
|
c74cfebebf
|
Revert "deps: upgrade redis-server."
This reverts commit d3e7d81c33.
|
2025-11-27 10:51:35 +08:00 |
|
liqiang-fit2cloud
|
d3e7d81c33
|
deps: upgrade redis-server.
|
2025-11-27 10:48:28 +08:00 |
|
liqiang-fit2cloud
|
674e34a735
|
refactor: change lib dir.
|
2025-11-27 10:29:20 +08:00 |
|
liqiang-fit2cloud
|
f341930795
|
security: not allow to create subprocess in sandbox by default.
sync2gitee / repo-sync (push) Waiting to run
Typos Check / Spell Check with Typos (push) Waiting to run
|
2025-11-26 15:18:43 +08:00 |
|
liqiang-fit2cloud
|
fd4c14f8e8
|
refactor: format code.
|
2025-11-26 12:16:20 +08:00 |
|
liqiang-fit2cloud
|
a89b1ff6d9
|
security: not allow to create subprocess in sandbox by default.
|
2025-11-26 11:24:59 +08:00 |
|
liqiang-fit2cloud
|
75da3bd82d
|
refactor: format code.
|
2025-11-25 10:58:17 +08:00 |
|
liqiang-fit2cloud
|
5e909a4ba1
|
feat: add MAXKB_SANDBOX_PYTHON_PROCESS_TIMEOUT_SECONDS env.
|
2025-11-25 10:27:08 +08:00 |
|
liqiang-fit2cloud
|
eb30b88d10
|
refactor: remove MAXKB_SANDBOX_PYTHON_BANNED_KEYWORDS.
sync2gitee / repo-sync (push) Waiting to run
Typos Check / Spell Check with Typos (push) Waiting to run
|
2025-11-24 18:42:06 +08:00 |
|
liqiang-fit2cloud
|
057e0420cf
|
security: not allow to create subprocess in sandbox by default.
|
2025-11-24 18:25:20 +08:00 |
|
liqiang-fit2cloud
|
491c39f4d0
|
refactor: change dir permissions.
|
2025-11-21 12:23:36 +08:00 |
|
liqiang-fit2cloud
|
a9b6f2b211
|
refactor: change dir permissions.
|
2025-11-21 10:35:47 +08:00 |
|
liqiang-fit2cloud
|
fb37c57b53
|
refactor: change dir permissions.
sync2gitee / repo-sync (push) Waiting to run
Typos Check / Spell Check with Typos (push) Waiting to run
|
2025-11-21 09:37:19 +08:00 |
|
liqiang-fit2cloud
|
c114eff9b6
|
refactor: change dir permissions.
|
2025-11-20 14:46:48 +08:00 |
|
liqiang-fit2cloud
|
7d3f92bd51
|
fix: fix incorrect permission may introduce security vulnerabilities.
|
2025-11-19 14:32:05 +08:00 |
|
liqiang-fit2cloud
|
8bfce62ad8
|
refactor: avoid using temp files in sandbox.
|
2025-11-18 14:27:48 +08:00 |
|
liqiang-fit2cloud
|
71165cdb71
|
refactor: add code comment.
sync2gitee / repo-sync (push) Waiting to run
Typos Check / Spell Check with Typos (push) Waiting to run
|
2025-11-11 18:32:52 +08:00 |
|
liqiang-fit2cloud
|
1ed1bbc1b0
|
refactor: throw EACCES error for IP, throw EAI_FAIL for domain name.
sync2gitee / repo-sync (push) Waiting to run
Typos Check / Spell Check with Typos (push) Waiting to run
|
2025-11-10 10:08:57 +08:00 |
|
liqiang-fit2cloud
|
f6c70da5ff
|
refactor: add cl100k_base.tiktoken tokenizer.
|
2025-11-07 15:34:36 +08:00 |
|
liqiang-fit2cloud
|
9a0fa37254
|
fix: fix typo.
|
2025-11-07 11:12:57 +08:00 |
|
liqiang-fit2cloud
|
180ee40cdc
|
refactor: set MAXKB_SANDBOX_HOME env.
|
2025-11-07 11:10:14 +08:00 |
|
liqiang-fit2cloud
|
83814b30f2
|
refactor: ban host.docker.internal access by default.
|
2025-11-07 11:02:17 +08:00 |
|
liqiang-fit2cloud
|
ff570a3c71
|
refactor: read SANDBOX_BANNED_HOSTS from file instead of env.
|
2025-11-07 09:47:35 +08:00 |
|
liqiang-fit2cloud
|
f0ecad6de1
|
refactor: rename MAXKB_SANDBOX_PYTHON_ALLOW_HOSTS_REGEXES to MAXKB_SANDBOX_PYTHON_BANNED_HOSTS
|
2025-11-06 15:41:35 +08:00 |
|
liqiang-fit2cloud
|
6e39df454c
|
refactor: rename MAXKB_SANDBOX_PYTHON_ALLOW_HOSTS_REGEXES to MAXKB_SANDBOX_PYTHON_ALLOW_HOST_REGEXES
|
2025-11-06 11:23:09 +08:00 |
|
liqiang-fit2cloud
|
9029240931
|
refactor: rename MAXKB_SANDBOX_PYTHON_BANNED_HOSTS to MAXKB_SANDBOX_PYTHON_ALLOW_HOSTS_REGEXES
|
2025-11-06 11:03:48 +08:00 |
|
liqiang-fit2cloud
|
1f4d6d1123
|
feat: add MAXKB_SANDBOX_PYTHON_BANNED_HOSTS env to ban host for sandbox in tools code.
|
2025-11-05 19:03:17 +08:00 |
|
liqiang-fit2cloud
|
f0be269cdc
|
feat: add MAXKB_SANDBOX_PYTHON_BANNED_HOSTS env to ban host for sandbox in tools code.
|
2025-11-05 18:44:57 +08:00 |
|
liqiang-fit2cloud
|
1d749a4a92
|
feat: add MAXKB_SANDBOX_PYTHON_BANNED_HOSTS env to ban host for sandbox in tools code.
|
2025-11-05 17:00:50 +08:00 |
|
liqiang-fit2cloud
|
b7152867a3
|
feat: add MAXKB_SANDBOX_PYTHON_BANNED_HOSTS env to ban host for sandbox in tools code.
|
2025-11-05 16:55:29 +08:00 |
|
liqiang-fit2cloud
|
9971df1a02
|
feat: add MAXKB_SANDBOX_PYTHON_BANNED_HOSTS env to ban host for sandbox in tools code.
|
2025-11-05 16:43:17 +08:00 |
|
liqiang-fit2cloud
|
8c788bf785
|
perf: revert preload.
|
2025-11-04 09:31:27 +08:00 |
|
liqiang-fit2cloud
|
33b4efa2a5
|
fix: fix LD_PRELOAD env.
sync2gitee / repo-sync (push) Has been cancelled
Typos Check / Spell Check with Typos (push) Has been cancelled
|
2025-10-31 18:36:44 +08:00 |
|