AthenaandClaude Sonnet 5 50738b139a fix(security): close icons path-prefix bypass, log swallowed exceptions ...

/icons/image used a bare string startswith() against allowed roots, so
a sibling dir like /usr/share/icons_evil would pass as if it were under
/usr/share/icons. Switched to the pathlib parents-based check already
used correctly in icons/compositor.py, plus a regression test.

Also stopped three bare `except Exception: pass` blocks (auto model
select fallback, conversation titling) from swallowing errors silently
- they now log to the existing chat trace helper. Behavior unchanged,
just visible when something's actually failing.

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>

2026-08-25 19:26:08 -05:00

..

icons

feat: add portable NexusOS CLI and packaging

2026-08-20 02:00:52 -05:00

memory

fix(runtime): improve local service reliability

2026-08-20 00:52:08 -05:00

playbooks

feat: playbook tools, RAG, vision, voice, chat controls, faster boot

2026-07-23 13:31:48 -05:00

__init__.py

Initial commit: NexusOS - local AI assistant platform

2026-07-21 22:48:38 -05:00

chat.py

feat(chat): add run_snippet, an execution track beside the render track

2026-08-20 14:30:03 -05:00

code_run.py

feat(chat): add run_snippet, an execution track beside the render track

2026-08-20 14:30:03 -05:00

frontend_manager.py

feat(packaging): move the CLI into nexusos_cli and make the wheel self-sufficient

2026-08-20 14:29:17 -05:00

hardware.py

feat(models): gate optional models behind required mistral+nomic-embed

2026-07-27 19:45:30 -05:00

main.py

fix(security): close icons path-prefix bypass, log swallowed exceptions

2026-08-25 19:26:08 -05:00

nexus_config.py

feat(packaging): move the CLI into nexusos_cli and make the wheel self-sufficient

2026-08-20 14:29:17 -05:00

ollama_manager.py

feat: add portable NexusOS CLI and packaging

2026-08-20 02:00:52 -05:00

playbook_manager.py

Initial commit: NexusOS - local AI assistant platform

2026-07-21 22:48:38 -05:00

proc_util.py

feat(packaging): move the CLI into nexusos_cli and make the wheel self-sufficient

2026-08-20 14:29:17 -05:00

search.py

Initial commit: NexusOS - local AI assistant platform

2026-07-21 22:48:38 -05:00

stt.py

feat: workspaces, agentic action tools, local Whisper STT, vec recall

2026-07-23 14:22:46 -05:00

tools.py

feat(chat): add run_snippet, an execution track beside the render track

2026-08-20 14:30:03 -05:00