Skip to content

Check and fix (if appropriate) security reports #12

@MrSidims

Description

@MrSidims

There were 3 with critical severity:
https://github.com/MrSidims/PytorchExplorer/security/code-scanning/3
https://github.com/MrSidims/PytorchExplorer/security/code-scanning/4
https://github.com/MrSidims/PytorchExplorer/security/code-scanning/5
But for now they are dismissed, as they are related by the 'code injection' done to server.py done by a user (aka inspecting IR for a user code). It's part of the design, moving forward in case if the app is moved away from localhost - user code should be guarded.

There are 2 with medium severity:
https://github.com/MrSidims/PytorchExplorer/security/code-scanning/1
https://github.com/MrSidims/PytorchExplorer/security/code-scanning/2

and tons of warnings, some of which are legit, but most of them are false positive or require security checking scripts adjustments (for example setup env for them properly). Or they are code style recommendations from codacy.

Metadata

Metadata

Assignees

No one assigned

    Labels

    BackendBug or feature request to the backendbugSomething isn't workingenhancementNew feature or request

    Projects

    No projects

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions