谢栋梁 9ed15f405a fix: path traversal vulnerability - use prefix matching in is_dangerous_path() ...

The is_dangerous_path() function only did exact string matching,
allowing attackers to bypass protection by accessing subdirectories:
- /etc was blocked but /etc/passwd was allowed
- C:\Windows was blocked but C:\Windows\System32\... was allowed

This minimal fix changes is_dangerous_path() to use PREFIX MATCHING:
- Now blocks dangerous directories AND all their subdirectories
- Paths like /etcbackup are still allowed (not under /etc)
- No changes to DANGEROUS_PATHS list

Security:
- Fixes CWE-22: Path Traversal vulnerability
- Reported by: Team off-course (K-Shield.Jr 15th)

Fixes #312
Fixes #293

2025-12-03 15:29:57 +08:00

..

__init__.py

Migration from Docker to Standalone Python Server (#73)

2025-06-18 23:41:22 +04:00

client_info.py

Lint

2025-06-30 13:35:40 +04:00

conversation_memory.py

feat: centralized environment handling, ensures ZEN_MCP_FORCE_ENV_OVERRIDE is honored correctly

2025-10-04 14:28:56 +04:00

env.py

feat!: breaking change - OpenRouter models are now read from conf/openrouter_models.json while Custom / Self-hosted models are read from conf/custom_models.json

2025-10-04 21:10:56 +04:00

file_types.py

Precommit updated to always perform external analysis (via _other_ model) unless specified not to. This prevents Claude from being overconfident and inadequately performing subpar precommit checks.

2025-08-20 15:19:01 +04:00

file_utils.py

refactor: include file modification dates too

2025-10-05 08:19:46 +04:00

image_utils.py

refactor: moved image related code out of base provider into a separate utility

2025-10-02 11:23:15 +04:00

model_context.py

fix: custom provider must only accept a model if it's declared explicitly. Upon model rejection (in auto mode) the list of available models is returned up-front to help with selection.

2025-10-02 13:49:23 +04:00

model_restrictions.py

feat: centralized environment handling, ensures ZEN_MCP_FORCE_ENV_OVERRIDE is honored correctly

2025-10-04 14:28:56 +04:00

security_config.py

fix: path traversal vulnerability - use prefix matching in is_dangerous_path()

2025-12-03 15:29:57 +08:00

storage_backend.py

feat: centralized environment handling, ensures ZEN_MCP_FORCE_ENV_OVERRIDE is honored correctly

2025-10-04 14:28:56 +04:00

token_utils.py

Use consistent terminology

2025-06-13 09:06:12 +04:00