e895535b96
Static classifier: - Flag mro()[i] base-class extraction alongside subscripted __mro__ (FileIO C base recovery). - Fail closed on non-literal shell redirect targets and cd to an outside directory. - Block sys.modules mutating methods (pop/popitem/clear/setdefault/update) that drop a guarded module for reimport. - Detect indirect eval/exec: <builtin>.__call__(payload) and eval/exec/compile passed by reference to a higher-order call (map/reduce/partial), including starred literals. - Block inspect.getclosurevars() closure recovery of a guarded wrapper. - Track runpy run_path/run_module from-import aliases. - Expand starred literal path arguments in the sensitive-read scanner. - Resolve container-hidden deserializers (([pickle.loads][0])(payload)). Runtime backstop: - Guard the low-level posix/nt chdir (cwd escape) and fchmod/fchown fd metadata mutators, matching the os.* deniers. Adds TestRound10Bypasses and low-level posix runtime tests. |
||
|---|---|---|
| .. | ||
| backend | ||
| frontend | ||
| src-tauri | ||
| __init__.py | ||
| install_llama_prebuilt.py | ||
| install_node_prebuilt.py | ||
| install_python_stack.py | ||
| LICENSE.AGPL-3.0 | ||
| node_prebuilt_pins.json | ||
| package-lock.json | ||
| package.json | ||
| setup.bat | ||
| setup.ps1 | ||
| setup.sh | ||
| Unsloth_Studio_Colab.ipynb | ||