#1009 schedules.py imports a module named by the caller

in-progress high security Created 2026-10-20 02:38 · Updated 2026-10-20 02:39

Description

Edit
EARS: When a schedule is created or run, the API/engine shall never import a module whose name comes from the request; only a fixed registry of handlers may be referenced. Found by the #911 sweep (api/blueprints/v1/schedules.py).

Comments

Loading comments...

Context

Loading context...

Audit History

View All
Loading audit history...