b1a775882e
Remove the potential DoS and code-execution vulnerability by replacing `ast.literal_eval(tool_call)` with `json.loads` and `extract_json` in `cli/main.py`. Ensures strict JSON parsing without breaking tests or relying on unsafe structures. Co-authored-by: google-labs-jules[bot] <161369871+google-labs-jules[bot]@users.noreply.github.com> Co-authored-by: aguzererler <6199053+aguzererler@users.noreply.github.com> |
||
|---|---|---|
| .. | ||
| static | ||
| __init__.py | ||
| announcements.py | ||
| config.py | ||
| main.py | ||
| models.py | ||
| stats_handler.py | ||
| utils.py | ||