github-featured / composiohq--composio

发布

0 发布 1,233 Git 标签

RSS 订阅源
  • py@0.11.6 27ed0c9bd6
    比较

    security(core): sensitive path blocklist + beforeFileUpload hook (patch) (#3262)

    frostbyte_neo 发布于 2026-04-23 13:12:16 +00:00

    Summary

    Security-hardening for automatic file upload in @composio/core (patch
    release per changeset).

    Changes

    • Default denylist for local paths before auto-upload /
      files.upload: blocks common credential directories (e.g. .ssh,
      .aws) and credential-like filenames (e.g. .env, default SSH private
      keys). Resolves symlinks when the path exists.
    • Config: sensitiveFileUploadProtection,
      fileUploadPathDenySegments on Composio.
    • beforeFileUpload hook (e.g. with composio.tools.get /
      tools.execute): rewrite path, return false to abort, or throw.
    • Errors: ComposioSensitiveFilePathBlockedError,
      ComposioFileUploadAbortedError; file modifier errors exported from
      @composio/core errors entry.
    • Changeset: patch bump for @composio/core.

    Notes

    • URLs and File blobs are not subject to the path denylist
      (unchanged).
    • Opt out of path checks only if required:
      sensitiveFileUploadProtection: false.

    Tests

    • pnpm test in ts/packages/core (799 tests) passed locally before
      commit.

    Made with Cursor

    下载附件