Added security check for path traversal

Author: Agent Bot

pyproject.toml

@@ -5,17 +5,17 @@ description = "Add your description here"
 readme = "README.md"
 requires-python = ">=3.11"
 dependencies = [
-    "docker>=7.1.0",
-    "langchain>=1.2.10",
-    "langchain-community>=0.0.38",
-    "langchain-groq>=1.1.2",
-    "langgraph>=1.0.10",
-    "langchain-chroma>=0.1.0",
-    "sentence-transformers>=2.7.0",
-    "chromadb>=0.5.0",
-    "pygithub>=2.8.1",
-    "python-dotenv>=1.2.2",
-    "streamlit>=1.55.0",
+    "docker==7.1.0",
+    "langchain==1.2.10",
+    "langchain-community==0.0.38",
+    "langchain-groq==1.1.2",
+    "langgraph==1.0.10",
+    "langchain-chroma==0.1.0",
+    "sentence-transformers==2.7.0",
+    "chromadb==0.5.0",
+    "pygithub==2.8.1",
+    "python-dotenv==1.2.2",
+    "streamlit==1.55.0",
 ]
 
 [project.optional-dependencies]

src/agents/coder.py

@@ -50,8 +50,14 @@ def coder_node(state: ASEState):
                 lines = lines[:-1]
             new_content = "\n".join(lines).strip()
 
-        # Apply fix locally
-        full_path = os.path.join(state["repo_path"], file_path)
+        # Apply fix locally with security check
+        full_path = os.path.abspath(os.path.join(state["repo_path"], file_path))
+        
+        # Security Check: Ensure path is within repo_path
+        if not full_path.startswith(os.path.abspath(state["repo_path"])):
+            print(f"⚠️ SECURITY ALERT: Attempted directory traversal detected for path: {file_path}")
+            continue
+
         os.makedirs(os.path.dirname(full_path), exist_ok=True)
         with open(full_path, 'w', encoding='utf-8') as f:
             f.write(new_content)

src/tools/docker_sandbox.py

@@ -56,3 +56,11 @@ def run_test(self, repo_path: str, test_script_content: str, test_file_name="tes
                     container.remove(force=True)
                 except:
                     pass
+            
+            # Sandbox Cleanliness: Remove the local test file to keep the repo clean
+            try:
+                test_file_path = os.path.join(repo_path, test_file_name)
+                if os.path.exists(test_file_path):
+                    os.remove(test_file_path)
+            except:
+                pass