f08aef1804
* Rebuild Studio branch on top of main * [pre-commit.ci] auto fixes from pre-commit.com hooks for more information, see https://pre-commit.ci * Fix security and code quality issues for Studio PR #4237 - Validate models_dir query param against allowed directory roots to prevent path traversal in /api/models/local endpoint - Replace string startswith() with Path.is_relative_to() for frontend path traversal check in serve_frontend - Sanitize SSE error messages to not leak exception details to clients (4 locations in inference.py) - Bind port-discovery socket to 127.0.0.1 instead of all interfaces in llama_cpp backend - Import datasets_root and resolve_output_dir in embedding training function to fix NameError and use managed output directory - Remove stale .gitignore entries for package-lock.json and test directories so tests can be tracked in version control - Add venv-reexecution logic to ui CLI command matching the studio command behavior * [pre-commit.ci] auto fixes from pre-commit.com hooks for more information, see https://pre-commit.ci * Move models_dir path validation before try/except block The HTTPException(403) was inside the try/except Exception handler, so it would be caught and re-raised as a 500. Moving the validation before the try block ensures the 403 is returned directly and also makes the control flow clearer for static analysis (path is validated before any filesystem operations). * Use os.path.realpath + startswith for models_dir validation CodeQL py/path-injection does not recognize Path.is_relative_to() as a sanitizer. Switched to os.path.realpath + str.startswith which is a recognized sanitizer pattern in CodeQL's taint analysis. The startswith check uses root_str + os.sep to prevent prefix collisions (e.g. /app/models_evil matching /app/models). * Never pass user input to Path constructor in models_dir validation CodeQL traces taint through Path(resolved) even after a startswith barrier guard. Fix: the user-supplied models_dir is only used as a string for comparison against allowed roots. The Path object passed to _scan_models_dir comes from the trusted allowed_roots list, not from user input. This fully breaks the taint chain. --------- Co-authored-by: pre-commit-ci[bot] <66853113+pre-commit-ci[bot]@users.noreply.github.com>
111 lines
3.1 KiB
Text
111 lines
3.1 KiB
Text
{
|
|
"cells": [
|
|
{
|
|
"cell_type": "markdown",
|
|
"id": "f2b0c6a1",
|
|
"metadata": {},
|
|
"source": [
|
|
"**License Notice**\n",
|
|
"\n",
|
|
"SPDX-License-Identifier: AGPL-3.0-only\n",
|
|
"\n",
|
|
"Copyright 2026-present the Unsloth AI Inc. team. All rights reserved. See /studio/LICENSE.AGPL-3.0\n"
|
|
]
|
|
},
|
|
{
|
|
"cell_type": "code",
|
|
"execution_count": null,
|
|
"id": "447c1156",
|
|
"metadata": {},
|
|
"outputs": [],
|
|
"source": [
|
|
"# ===========================================\n",
|
|
"# ⚠️ GPU Check - Run This First!\n",
|
|
"# ===========================================\n",
|
|
"import torch\n",
|
|
"\n",
|
|
"print(\"🔍 Checking for GPU...\")\n",
|
|
"if not torch.cuda.is_available():\n",
|
|
" print(\"❌ ERROR: No GPU detected!\")\n",
|
|
" print(\"\\n📋 To enable GPU:\")\n",
|
|
" print(\" 1. Go to: Runtime → Change runtime type\")\n",
|
|
" print(\" 2. Select: Hardware accelerator → GPU (T4 is free)\")\n",
|
|
" print(\" 3. Click: Save\")\n",
|
|
" print(\" 4. Restart and re-run all cells\")\n",
|
|
" raise RuntimeError(\"⛔ GPU required for Unsloth Studio\")\n",
|
|
"else:\n",
|
|
" gpu_name = torch.cuda.get_device_name(0)\n",
|
|
" print(f\"✅ GPU detected: {gpu_name}\")\n",
|
|
" print(\" Ready to proceed!\")"
|
|
]
|
|
},
|
|
{
|
|
"cell_type": "code",
|
|
"execution_count": null,
|
|
"id": "f04a9b46",
|
|
"metadata": {},
|
|
"outputs": [],
|
|
"source": [
|
|
"# ===========================================\n",
|
|
"# GitHub Authentication (Private Repo)\n",
|
|
"# ===========================================\n",
|
|
"from getpass import getpass\n",
|
|
"import os\n",
|
|
"\n",
|
|
"print(\"🔐 GitHub Token Required\")\n",
|
|
"print(\"Get token: https://github.com/settings/tokens\")\n",
|
|
"print(\"Scope needed: 'repo'\")\n",
|
|
"print(\"-\" * 50)\n",
|
|
"\n",
|
|
"github_token = getpass(\"Enter GitHub Token: \")\n",
|
|
"os.environ['GITHUB_TOKEN'] = github_token\n",
|
|
"print(\"✅ Token stored\")"
|
|
]
|
|
},
|
|
{
|
|
"cell_type": "code",
|
|
"execution_count": null,
|
|
"id": "27e68f91",
|
|
"metadata": {},
|
|
"outputs": [],
|
|
"source": [
|
|
"# ===========================================\n",
|
|
"# Setup: Clone repo and run setup\n",
|
|
"# ===========================================\n",
|
|
"\n",
|
|
"import os\n",
|
|
"github_token = os.environ['GITHUB_TOKEN']\n",
|
|
"!git clone https://{github_token}@github.com/unslothai/new-ui-prototype.git\n",
|
|
"%cd /content/new-ui-prototype\n",
|
|
"\n",
|
|
"# Run setup script\n",
|
|
"!chmod +x setup.sh\n",
|
|
"!./setup.sh"
|
|
]
|
|
},
|
|
{
|
|
"cell_type": "code",
|
|
"execution_count": null,
|
|
"id": "277e431e",
|
|
"metadata": {},
|
|
"outputs": [],
|
|
"source": [
|
|
"# ===========================================\n",
|
|
"# Start Unsloth Studio\n",
|
|
"# ===========================================\n",
|
|
"import sys\n",
|
|
"sys.path.insert(0, '/content/new-ui-prototype/studio/backend')\n",
|
|
"\n",
|
|
"from colab import start\n",
|
|
"start()"
|
|
]
|
|
}
|
|
],
|
|
"metadata": {
|
|
"language_info": {
|
|
"name": "python"
|
|
}
|
|
},
|
|
"nbformat": 4,
|
|
"nbformat_minor": 5
|
|
}
|