github/AutoGPT
1
1
Fork 0
mirror of https://github.com/Significant-Gravitas/AutoGPT.git synced 2026-04-08 03:00:28 -04:00
Code Issues Packages Projects Releases Wiki Activity

fix(copilot): sanitize transcript path in subagent stop hook

Browse Source 
Strip control characters from agent_transcript_path before logging
to prevent log injection, matching the existing pattern in pre_compact_hook.
This commit is contained in:
Zamil Majdy
2026-04-01 07:41:28 +02:00
parent ce201cd19c
commit 611a20d7df
1 changed files with 8 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

10
autogpt_platform/backend/backend/copilot/sdk/security_hooks.py
View File

@@ -354,13 +354,19 @@ def create_security_hooks(
_ = context, tool_use_id
agent_id = input_data.get("agent_id", "?")
agent_type = input_data.get("agent_type", "?")
transcript = input_data.get("agent_transcript_path", "")
# Sanitize transcript path: strip control chars to prevent
# log injection (same pattern as pre_compact_hook).
transcript = (
str(input_data.get("agent_transcript_path", ""))
.replace("\n", "")
.replace("\r", "")
)
logger.info(
"[SDK] SubagentStop: agent_id=%s, type=%s, user=%s, transcript=%s",
agent_id,
agent_type,
user_id,
str(transcript)[:200],
transcript[:200],
)
return cast(SyncHookJSONOutput, {})