hermes-agent/cron
Awsh1 878b1d3d33 fix(cron): harden scheduler against path traversal and env leaks
Cherry-picked from PR #5503 by Awsh1.

- Validate ALL script paths (absolute, relative, tilde) against scripts_dir boundary
- Add API-boundary validation in cronjob_tools.py
- Move os.environ injections inside try block so finally cleanup always runs
- Comprehensive regression tests for path containment bypass
2026-04-06 12:42:16 -07:00
..
__init__.py docs: clarify gateway service scopes (#1378) 2026-03-14 21:17:41 -07:00
jobs.py feat(cron): add script field for pre-run data collection (#5082) 2026-04-04 10:43:39 -07:00
scheduler.py fix(cron): harden scheduler against path traversal and env leaks 2026-04-06 12:42:16 -07:00