zlei6/ragflow
1
0
Fork 0
mirror of https://github.com/infiniflow/ragflow.git synced 2026-08-05 15:20:30 +08:00
Code Issues Packages Projects Releases Wiki Activity

docs: fix grammar and missing articles in SECURITY.md (#17360)

Browse Source 
## Description
This PR fixes grammar and missing articles in `SECURITY.md`.

## Details
Updated sentence phrasing (`numpy module has...` $\to$ `the numpy module
has...` and `function directly execute` $\to$ `function to directly
execute`).

Co-authored-by: ferkans-amir <amir.rezaei@tu-berlin.de>
This commit is contained in:
amir-rezaei
2026-07-24 14:18:44 +02:00
committed by GitHub
parent ae4727e595
commit 64dbc518aa
1 changed files with 1 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
SECURITY.md
View File

@@ -18,7 +18,7 @@ main
### Actual behavior ### Actual behavior
The restricted_loads function at [api/utils/__init__.py#L215](https://github.com/infiniflow/ragflow/blob/main/api/utils/__init__.py#L215) is still vulnerable leading via code execution. The restricted_loads function at [api/utils/__init__.py#L215](https://github.com/infiniflow/ragflow/blob/main/api/utils/__init__.py#L215) is still vulnerable leading via code execution.
The main reason is that numpy module has a numpy.f2py.diagnose.run_command function directly execute commands, but the restricted_loads function allows users import functions in module numpy. The main reason is that the numpy module has a numpy.f2py.diagnose.run_command function to directly execute commands, but the restricted_loads function allows users to import functions in the numpy module.
### Steps to reproduce ### Steps to reproduce