115810eae3
_find_sensitive_paths does not match /etc/passwd (it lives in the open-call gate's _SENSITIVE_FILE_PREFIXES list, not in _ABSOLUTE_SENSITIVE), so a chained reassign p='/etc/hosts'; p='/etc/passwd'; open(p) kept /etc/hosts as the representative and slipped through. Duplicate the open-call prefix list in the pre-pass scope so _looks_sensitive catches /etc/passwd and the analogous /proc/<pid> reads too. |
||
|---|---|---|
| .. | ||
| __init__.py | ||
| _html_to_md.py | ||
| anthropic_compat.py | ||
| audio_codecs.py | ||
| defaults.py | ||
| external_provider.py | ||
| inference.py | ||
| key_exchange.py | ||
| llama_cpp.py | ||
| llama_server_args.py | ||
| mlx_inference.py | ||
| orchestrator.py | ||
| providers.py | ||
| tools.py | ||
| worker.py | ||