xiaxinhang/pr-agent
1
0
Fork 0
mirror of https://github.com/qodo-ai/pr-agent.git synced 2025-07-05 05:10:38 +08:00
Code Issues Packages Projects Releases Wiki Activity

fix: improve CLI argument validation for sensitive parameters with dot notation

Browse Source
This commit is contained in:
mrT23
2025-01-01 15:53:37 +02:00
parent d1caa0f15f
commit e2be1f1cee
1 changed files with 2 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
pr_agent/agent/pr_agent.py
View File

@ -66,9 +66,9 @@ class PRAgent:
if args: if args:
for arg in args: for arg in args:
if arg.startswith('--'): if arg.startswith('--'):
for forbidden_arg in forbidden_cli_args:
arg_word = arg.lower() arg_word = arg.lower()
arg_word = arg_word.replace('__', '.') # replace double underscore with dot, e.g. --openai__key -> --openai.key arg_word = arg_word.replace('__', '.') # replace double underscore with dot, e.g. --openai__key -> --openai.key
for forbidden_arg in forbidden_cli_args:
forbidden_arg_word = forbidden_arg.lower() forbidden_arg_word = forbidden_arg.lower()
if '.' not in forbidden_arg_word: if '.' not in forbidden_arg_word:
forbidden_arg_word = '.' + forbidden_arg_word forbidden_arg_word = '.' + forbidden_arg_word