mirror of
https://github.com/norandom/OpenUltraSAST.git
synced 2026-10-16 03:49:26 +00:00
Marius CiepluchandClaude Fable 5.1
8ab4207618
Tasks 1.1, 5.1, 5.2, 5.4 and the data half of 5.3. - mechanisms.toml: closed vocabulary v1 (20 ids) every expected row cites. - vibe-py: 35 Real-Vuln-Benchmark pairs (Apache-2.0), human provenance only because the LLM-generated repositories carry no license (escalated). - vfc-js: 17 Node fix-commit pairs harvested upstream (MIT/Apache-2.0), SecBench.js itself is not vendored (no license); sinks derived on 13/17. - agent-vfc: 29 agent-trailer fixes as catalog-candidates.toml plus REVIEW.md; the loaded catalog stays empty until a human reviews them. - datasets.toml and README document every slice and its review status. Co-Authored-By: Claude Fable 5.1 <[email protected]> Claude-Session: https://claude.ai/code/session_01T7XD7x5KonMdmGRkp63EQG
34 lines
1.2 KiB
Python
34 lines
1.2 KiB
Python
# Provenance: D-sorganization/UpstreamDrift (fixed).
|
|
# repo: D-sorganization/UpstreamDrift
|
|
# commit: c3a0787080489b30e2ed0abfac03b51e45da184b
|
|
# parent: e28d1da5e103d93951ef11b78a6e9b89ac1fa2bc
|
|
# commit_url: https://github.com/D-sorganization/UpstreamDrift/commit/c3a0787080489b30e2ed0abfac03b51e45da184b
|
|
# cve:
|
|
# license: MIT
|
|
# function: _find_logo_file
|
|
# relpath: src/api/local_server.py
|
|
# provenance: agent
|
|
# mechanism: path_join_user_input
|
|
|
|
def _find_logo_file(logo_name: str) -> Path | None:
|
|
"""Search for a logo file in known asset directories.
|
|
|
|
The caller-supplied ``logo_name`` is joined onto each candidate root via
|
|
:func:`_safe_join` so that ``..`` traversal, absolute paths, and symlink
|
|
escape are rejected before touching the filesystem.
|
|
|
|
Args:
|
|
logo_name: Filename of the logo to find.
|
|
|
|
Returns:
|
|
Path to the logo file, or None if not found or rejected as unsafe.
|
|
"""
|
|
for root in (
|
|
Path(__file__).parent.parent.parent / "assets" / "logos",
|
|
Path(__file__).parent.parent / "launchers" / "assets",
|
|
):
|
|
resolved = _safe_join(root, logo_name)
|
|
if resolved is not None and resolved.exists() and resolved.is_file():
|
|
return resolved
|
|
return None
|