github/AutoGPT
1
1
Fork 0
mirror of https://github.com/Significant-Gravitas/AutoGPT.git synced 2026-02-12 15:55:03 -05:00
Code Issues Packages Projects Releases Wiki Activity

fix(chat/tools): sanitize session_id in sandbox workspace path

Browse Source 
Align with SDK's _make_sdk_cwd() to prevent path traversal and ensure
python_exec/bash_exec share the same workspace as SDK file tools.
This commit is contained in:
Zamil Majdy
2026-02-12 19:08:47 +04:00
parent ec1ab06e0d
commit bec2e1ddee
1 changed files with 16 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

18
autogpt_platform/backend/backend/api/features/chat/tools/sandbox.py
View File

@@ -37,9 +37,23 @@ def has_network_sandbox() -> bool:
return _UNSHARE_AVAILABLE
_WORKSPACE_PREFIX = "/tmp/copilot-"
def get_workspace_dir(session_id: str) -> str:
"""Get or create the workspace directory for a session."""
workspace = f"/tmp/copilot-{session_id}"
"""Get or create the workspace directory for a session.
Uses the same path as the SDK's ``_make_sdk_cwd()`` so that
python_exec/bash_exec share the workspace with the SDK file tools.
"""
import re
safe_id = re.sub(r"[^A-Za-z0-9-]", "", session_id)
if not safe_id:
safe_id = "default"
workspace = os.path.normpath(f"{_WORKSPACE_PREFIX}{safe_id}")
if not workspace.startswith(_WORKSPACE_PREFIX):
raise ValueError(f"Session path escaped prefix: {workspace}")
os.makedirs(workspace, exist_ok=True)
return workspace