semantic-kernel

mirror of https://github.com/microsoft/semantic-kernel.git synced 2026-10-12 02:19:06 +00:00

Files

T

Roger Barreto 5b27a727a2 Python: Add file upload security controls to SessionsPythonPlugin (#13478 )

Overriding merge checks as there are unrelated Python integration test failures

### Motivation and Context

- Uploads: Require both EnableDangerousFileUploads = true AND
AllowedUploadDirectories configured
- Downloads: Permissive by default, but if AllowedDownloadDirectories is
configured, path validation
  applies
- Both use path canonicalization to prevent traversal attacks

### Contribution Checklist

<!-- Before submitting this PR, please make sure: -->

- [x] The code builds clean without any errors or warnings
- [x] The PR follows the [SK Contribution
Guidelines](https://github.com/microsoft/semantic-kernel/blob/main/CONTRIBUTING.md)
and the [pre-submission formatting
script](https://github.com/microsoft/semantic-kernel/blob/main/CONTRIBUTING.md#development-scripts)
raises no violations
- [x] All unit tests pass, and I have added new tests where possible
- [x] I didn't break anyone 😄

2026-01-29 10:53:44 +00:00

assets

Python: Support Declarative Agent Spec for ChatCompletionAgent & AzureAIAgent (#11982 )

2025-05-13 23:14:36 +00:00

integration

Python: added allowed_domains to HttpPlugin (#13462 )

2026-01-22 12:52:56 +09:00

samples

Python: Feature python vector stores preb (#12271 )

2025-06-19 18:34:59 +00:00

unit

Python: Add file upload security controls to SessionsPythonPlugin (#13478 )