mirrors/hermes-agent
1
0
Fork 0
mirror of https://github.com/NousResearch/hermes-agent.git synced 2026-07-29 18:46:59 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 7

fix(openviking): sanitize splitline env separators

Browse source
This commit is contained in:
Hao Zhe 2026-07-05 05:33:22 +08:00 • committed by kshitij
parent 35d3ade3aa
commit 36f01d2e54
2 changed files with 15 additions and 3 deletions
Download patch file Download diff file Expand all files Collapse all files

6
plugins/memory/openviking/__init__.py
View file

@ -972,11 +972,11 @@ def _env_line_safe(value: Any) -> str:
``read_text().splitlines()`` round-trip — letting a malformed or pasted
secret (e.g. an api_key copied with a trailing record) inject an
arbitrary additional variable into the persisted credentials file. Strip
the line terminators (``\r``, ``\n``) and the NUL byte so a value can
only ever occupy the single line it is written on.
the line separators recognized by ``splitlines()`` and the NUL byte so a
value can only ever occupy the single line it is written on.
"""
text = value if isinstance(value, str) else str(value)
return text.replace("\r", "").replace("\n", "").replace("\x00", "")
return "".join(text.replace("\x00", "").splitlines())
def _write_env_vars(env_path: Path, env_writes: dict, remove_keys: tuple[str, ...] = ()) -> None: