Awsh1 878b1d3d33 fix(cron): harden scheduler against path traversal and env leaks ...

Cherry-picked from PR #5503 by Awsh1.

- Validate ALL script paths (absolute, relative, tilde) against scripts_dir boundary
- Add API-boundary validation in cronjob_tools.py
- Move os.environ injections inside try block so finally cleanup always runs
- Comprehensive regression tests for path containment bypass

2026-04-06 12:42:16 -07:00

19 KiB

Raw Blame History

View Raw