Fix code scanning alert no. 4: Uncontrolled data used in path expression

Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com>
This commit is contained in:
ي
2025-01-09 19:58:38 +05:30
parent ed493a1951
commit b10e1af1b5

View File

@@ -7,11 +7,19 @@ import os
# Function to encode the image
def encode_image(image_path):
with open(image_path, "rb") as image_file:
safe_root = '/safe/root/directory' # Define your safe root directory
normalized_path = os.path.normpath(image_path)
if not normalized_path.startswith(safe_root):
raise ValueError("Invalid image path")
with open(normalized_path, "rb") as image_file:
return base64.b64encode(image_file.read()).decode('utf-8')
def get_image_description(image_path):
base64_image = encode_image(image_path)
safe_root = '/safe/root/directory' # Define your safe root directory
normalized_path = os.path.normpath(image_path)
if not normalized_path.startswith(safe_root):
raise ValueError("Invalid image path")
base64_image = encode_image(normalized_path)
headers = {
"Content-Type": "application/json",