mirror of
https://github.com/MervinPraison/PraisonAIUI.git
synced 2026-11-07 13:56:36 -10:00
2162b61629
* fix: replace eval()-based calculate tool with safe math interpreter (fixes #60) Add AST-walking eval_math_expression() with no eval/exec. Wire into YAML calculate tool and the provider-praisonai example. Co-authored-by: Cursor <[email protected]> * fix: add exponent size limits to prevent DoS attacks in math evaluator - Add validation to reject exponents with abs(exponent) > 100 - Prevents CPU/memory exhaustion via expressions like 2**1000000000 - Add comprehensive test coverage for exponent limits - Addresses security concern identified in code review 🤖 Generated with [Claude Code](https://claude.ai/code) Co-authored-by: MervinPraison <[email protected]> --------- Co-authored-by: MervinPraison <[email protected]> Co-authored-by: Cursor <[email protected]> Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com> Co-authored-by: MervinPraison <[email protected]>