semantic-kernel

mirror of https://github.com/microsoft/semantic-kernel.git synced 2026-10-12 11:19:56 +00:00

Files

T

Roger Barreto 5b27a727a2 Python: Add file upload security controls to SessionsPythonPlugin (#13478 )

Overriding merge checks as there are unrelated Python integration test failures

### Motivation and Context

- Uploads: Require both EnableDangerousFileUploads = true AND
AllowedUploadDirectories configured
- Downloads: Permissive by default, but if AllowedDownloadDirectories is
configured, path validation
  applies
- Both use path canonicalization to prevent traversal attacks

### Contribution Checklist

<!-- Before submitting this PR, please make sure: -->

- [x] The code builds clean without any errors or warnings
- [x] The PR follows the [SK Contribution
Guidelines](https://github.com/microsoft/semantic-kernel/blob/main/CONTRIBUTING.md)
and the [pre-submission formatting
script](https://github.com/microsoft/semantic-kernel/blob/main/CONTRIBUTING.md#development-scripts)
raises no violations
- [x] All unit tests pass, and I have added new tests where possible
- [x] I didn't break anyone 😄

2026-01-29 10:53:44 +00:00

crew_ai

Python: allow settings to be created directly (#11468 )

2025-04-11 06:26:22 +00:00

sessions_python_tool

Python: Add file upload security controls to SessionsPythonPlugin (#13478 )

2026-01-29 10:53:44 +00:00

__init__.py

Python: further improvements to checks and docs in dev_setup (#6445 )

2024-05-31 13:06:41 +00:00

conversation_summary_plugin.py

Python: added tests for core_plugins (#6470 )