cello GitHub

PR #446	Clean api-engine and agent code.
	* Remove not needed and deprecated libraries, so we can close these dependencies-related PRs. * #417 * #416 * #415 * #414 * #367 Signed-off-by: Yuanmao Zhu <yuanmaozhu@ualberta.ca>

Created At 2022-05-19 04:38:22 +0000 UTC

PR #444	Support M1 chip development.
	Use docker built-in functionality to support for Multi-Platform Docker Builds. So cello project can develop with the m1 chips. Signed-off-by: Yuanmao Zhu <yuanmaozhu@ualberta.ca>

Created At 2022-05-15 23:20:58 +0000 UTC

PR #443

Fix (security) : Path Traversal Bug

Unsanitized input from ```r.headers``` and ```content_type = r.headers["content-type"] extension = mimetypes.guess_extension(content_type) file_name = "%s%s" % (uuid4().hex, extension) target_file = os.path.join(target_dir, secure(file_name))``` resource flows into ```open(target_file, "wb").write(r.content)```, where it is used as a path. This may result in a Path Traversal vulnerability and allow an attacker to write arbitrary files. Signed-off-by: Bhaskar <dev@bhaskar.email>

Created At 2022-05-14 14:46:35 +0000 UTC