AthenaandClaude Sonnet 5 50738b139a fix(security): close icons path-prefix bypass, log swallowed exceptions ...

/icons/image used a bare string startswith() against allowed roots, so
a sibling dir like /usr/share/icons_evil would pass as if it were under
/usr/share/icons. Switched to the pathlib parents-based check already
used correctly in icons/compositor.py, plus a regression test.

Also stopped three bare `except Exception: pass` blocks (auto model
select fallback, conversation titling) from swallowing errors silently
- they now log to the existing chat trace helper. Behavior unchanged,
just visible when something's actually failing.

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>

2026-08-25 19:26:08 -05:00

..

snippet_probes

feat(chat): add run_snippet, an execution track beside the render track

2026-08-20 14:30:03 -05:00

test_cli_packaging.py

feat(cli): add interactive TUI chat

2026-08-21 15:39:28 -05:00

test_code_run.py

feat(chat): add run_snippet, an execution track beside the render track

2026-08-20 14:30:03 -05:00

test_documents.py

fix(runtime): improve local service reliability

2026-08-20 00:52:08 -05:00

test_monitor.py

feat(packaging): move the CLI into nexusos_cli and make the wheel self-sufficient

2026-08-20 14:29:17 -05:00

test_nexus_api.py

feat(packaging): move the CLI into nexusos_cli and make the wheel self-sufficient

2026-08-20 14:29:17 -05:00

test_packaging_deps.py

feat(cli): add interactive TUI chat

2026-08-21 15:39:28 -05:00

test_proc_util.py

feat(packaging): move the CLI into nexusos_cli and make the wheel self-sufficient

2026-08-20 14:29:17 -05:00

test_smoke.py

fix(security): close icons path-prefix bypass, log swallowed exceptions

2026-08-25 19:26:08 -05:00

test_snippet_probes.py

feat(chat): add run_snippet, an execution track beside the render track

2026-08-20 14:30:03 -05:00

test_tools.py

feat(chat): add run_snippet, an execution track beside the render track

2026-08-20 14:30:03 -05:00

test_tui.py

fix(tui): prioritize interrupt and quit keys

2026-08-25 15:30:03 -05:00