Link Search Menu Expand Document

cello GitHub

PR #446 Clean api-engine and agent code.
* Remove not needed and deprecated libraries, so we can close these dependencies-related PRs. * #417 * #416 * #415 * #414 * #367 Signed-off-by: Yuanmao Zhu <yuanmaozhu@ualberta.ca>
Created At 2022-05-19 04:38:22 +0000 UTC
PR #444 Support M1 chip development.
Use docker built-in functionality to support for Multi-Platform Docker Builds. So cello project can develop with the m1 chips. Signed-off-by: Yuanmao Zhu <yuanmaozhu@ualberta.ca>
Created At 2022-05-15 23:20:58 +0000 UTC
PR #443 Fix (security) : Path Traversal Bug
Unsanitized input from ```r.headers``` and ```content_type = r.headers["content-type"] extension = mimetypes.guess_extension(content_type) file_name = "%s%s" % (uuid4().hex, extension) target_file = os.path.join(target_dir, secure(file_name))``` resource flows into ```open(target_file, "wb").write(r.content)```, where it is used as a path. This may result in a Path Traversal vulnerability and allow an attacker to write arbitrary files. Signed-off-by: Bhaskar <dev@bhaskar.email>
Created At 2022-05-14 14:46:35 +0000 UTC