You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
{{ message }}
This repository was archived by the owner on Jun 18, 2026. It is now read-only.
fix: add path validation to DotExporter/AnnotationManager + remove dead asCollection
Security (CWE-22):
- DotExporter.export(): now calls ExportUtils.validateOutputPath()
before writing, matching CsvReportExporter/GraphMLExporter/
InteractiveHtmlExporter which already had this guard.
- GraphAnnotationManager.exportToFile(): same path validation added.
- GraphAnnotationManager.importFromFile(): same validation to prevent
reading files outside allowed directories.
Code cleanup:
- IndependentSetAnalyzer: removed dead no-op asCollection() method
(identity function: takes Collection, returns same Collection).
Inlined all 8 call sites — graph.getVertices() already returns
Collection<String>, wrapper served no purpose.
0 commit comments