wenjin272 commented on issue #1004: URL: https://github.com/apache/flink-agents/issues/1004#issuecomment-5521655373
Thanks for the detailed analysis @Ashfaqbs. This has already been addressed by #1079, which is now on `main`. Both Java and Python reject file redirects except for file-descriptor duplication/closure, and also reject execution-changing environment assignments such as `PATH`, `BASH_ENV`, `LD_*`, and `DYLD_*`. The two reported reproducers therefore no longer pass validation. I simply had not closed this issue yet. The read-only materialized skill directory item can be tracked separately as defense in depth. Closing this as fixed. -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
