Skip to content

fix: sandbox ImageRAGPrompt template rendering (SSTI, sibling of CVE-2026-2969) #144

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
joysinleung wants to merge 1 commit into
base: main
Choose a base branch
from
Open

fix: sandbox ImageRAGPrompt template rendering (SSTI, sibling of CVE-2026-2969) #144

Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
7 changes: 4 additions & 3 deletions datapizza-ai-core/datapizza/modules/prompt/image_rag.py
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,4 +1,4 @@
from jinja2 import Template
from jinja2.sandbox import SandboxedEnvironment

from datapizza.core.modules.prompt import Prompt
from datapizza.core.utils import extract_media
Expand All @@ -24,9 +24,10 @@ def __init__(
image_prompt_presentation: str # The image prompt jinja template
each_image_template: str # The each image jinja template
"""
self.user_prompt_template = Template(user_prompt_template)
env = SandboxedEnvironment()
self.user_prompt_template = env.from_string(user_prompt_template)
self.image_prompt_presentation = image_prompt_presentation
self.each_image_template = Template(each_image_template)
self.each_image_template = env.from_string(each_image_template)

def _extract_images_from_chunk(self, chunk: Chunk) -> list[MediaBlock]:
metadata = chunk.metadata
Expand Down