Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[experiment] Verify command injection when starting experiments asynchronously #3685

Merged
merged 2 commits into from
Aug 23, 2024

Conversation

lalala123123
Copy link
Contributor

@lalala123123 lalala123123 commented Aug 23, 2024

Description

Added command parameter detection before executing commands to avoid risky characters.

All Promptflow Contribution checklist:

  • The pull request does not introduce [breaking changes].
  • CHANGELOG is updated for new features, bug fixes or other significant changes.
  • I have read the contribution guidelines.
  • I confirm that all new dependencies are compatible with the MIT license.
  • Create an issue and link to the pull request to get dedicated review from promptflow team. Learn more: suggested workflow.

General Guidelines and Best Practices

  • Title of the pull request is clear and informative.
  • There are a small number of commits, each of which have an informative message. This means that previously merged commits do not appear in the history of the PR. For more information on cleaning up the commits in your PR, see this page.

Testing Guidelines

  • Pull request includes test coverage for the included changes.

wangchao1230
wangchao1230 previously approved these changes Aug 23, 2024
Copy link

github-actions bot commented Aug 23, 2024

promptflow SDK CLI Azure E2E Test Result zhrua/fix_inject

  4 files    4 suites   4m 19s ⏱️
244 tests 204 ✅  40 💤 0 ❌
976 runs  816 ✅ 160 💤 0 ❌

Results for commit 4132d42.

♻️ This comment has been updated with latest results.

Copy link

github-actions bot commented Aug 23, 2024

SDK CLI Global Config Test Result zhrua/fix_inject

6 tests   6 ✅  1m 20s ⏱️
1 suites  0 💤
1 files    0 ❌

Results for commit 4132d42.

♻️ This comment has been updated with latest results.

Copy link

github-actions bot commented Aug 23, 2024

Executor Unit Test Result zhrua/fix_inject

798 tests   798 ✅  3m 41s ⏱️
  1 suites    0 💤
  1 files      0 ❌

Results for commit 4132d42.

♻️ This comment has been updated with latest results.

Copy link

github-actions bot commented Aug 23, 2024

Executor E2E Test Result zhrua/fix_inject

246 tests   240 ✅  5m 5s ⏱️
  1 suites    6 💤
  1 files      0 ❌

Results for commit 4132d42.

♻️ This comment has been updated with latest results.

Copy link

SDK CLI Test Result zhrua/fix_inject

    4 files      4 suites   1h 5m 37s ⏱️
  790 tests   767 ✅ 23 💤 0 ❌
3 160 runs  3 068 ✅ 92 💤 0 ❌

Results for commit 4132d42.

@lalala123123 lalala123123 merged commit f9efeaa into main Aug 23, 2024
41 checks passed
@lalala123123 lalala123123 deleted the zhrua/fix_inject branch August 23, 2024 09:49
singankit pushed a commit that referenced this pull request Sep 18, 2024
…hronously (#3685)

# Description

Added command parameter detection before executing commands to avoid
risky characters.

# All Promptflow Contribution checklist:
- [ ] **The pull request does not introduce [breaking changes].**
- [ ] **CHANGELOG is updated for new features, bug fixes or other
significant changes.**
- [ ] **I have read the [contribution
guidelines](https://github.com/microsoft/promptflow/blob/main/CONTRIBUTING.md).**
- [ ] **I confirm that all new dependencies are compatible with the MIT
license.**
- [ ] **Create an issue and link to the pull request to get dedicated
review from promptflow team. Learn more: [suggested
workflow](../CONTRIBUTING.md#suggested-workflow).**

## General Guidelines and Best Practices
- [ ] Title of the pull request is clear and informative.
- [ ] There are a small number of commits, each of which have an
informative message. This means that previously merged commits do not
appear in the history of the PR. For more information on cleaning up the
commits in your PR, [see this
page](https://github.com/Azure/azure-powershell/blob/master/documentation/development-docs/cleaning-up-commits.md).

### Testing Guidelines
- [ ] Pull request includes test coverage for the included changes.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants