KKK 055e4df049

fix(sandbox): add input sanitisation guard to SandboxAuditMiddleware (#1872) ...

* fix(sandbox): add L2 input sanitisation to SandboxAuditMiddleware

Add _validate_input() to reject malformed bash commands before regex
classification: empty commands, oversized commands (>10 000 chars), and
null bytes that could cause detection/execution layer inconsistency.

* fix(sandbox): address Copilot review — type guard, log truncation, reject reason

- Coerce None/non-string command to str before validation
- Truncate oversized commands in audit logs to prevent log amplification
- Propagate reject_reason through _pre_process() to block message
- Remove L2 label from comments and test class names

* fix(sandbox): isinstance type guard + async input sanitisation tests

Address review comments:
- Replace str() coercion with isinstance(raw_command, str) guard so
  non-string truthy values (0, [], False) fall back to empty string
  instead of passing validation as "0"/"[]"/"False".
- Add TestInputSanitisationBlocksInAwrapToolCall with 4 async tests
  covering empty, null-byte, oversized, and None command via
  awrap_tool_call path.

2026-04-06 17:21:58 +08:00

..

deerflow

fix(sandbox): add input sanitisation guard to SandboxAuditMiddleware (#1872)

2026-04-06 17:21:58 +08:00

pyproject.toml

feat(uploads): add pymupdf4llm PDF converter with auto-fallback and async offload (#1727)

2026-04-03 21:59:45 +08:00