Restructure dash (#372)
* Restructure dash * WIP * WIP * refactor trigger UI: extract PR summary card, add mentions section, rename labels Co-authored-by: Cursor <cursoragent@cursor.com> * clean up console UI: remove info icons from section descriptions, rename mentions trigger Co-authored-by: Cursor <cursoragent@cursor.com> * fix review feedback: layout, terminology, form scope - extract console sidebar sections to module-level constant - align three-column layout breakpoints to xl (match sidebar visibility) - fix mixed shell/bash terminology in beta page - scope FormProvider to trigger sections only, restore autoComplete="off" Co-authored-by: Cursor <cursoragent@cursor.com> * Bump --------- Co-authored-by: Cursor <cursoragent@cursor.com>
This commit is contained in:
committed by
pullfrog[bot]
parent
b8a0d799ee
commit
a7bd746f21
@@ -120,7 +120,7 @@ export const installPythonDependencies: PrepDefinition = {
|
||||
|
||||
log.info(`» detected python config: ${config.file} (using ${config.tool})`);
|
||||
|
||||
// SECURITY: when bash is disabled, skip ALL python dependency installation.
|
||||
// SECURITY: when shell is disabled, skip ALL python dependency installation.
|
||||
// every python install path can potentially execute arbitrary code:
|
||||
// - setup.py / pyproject.toml: directly execute build backends
|
||||
// - requirements.txt: can contain "-e ." or local path references that
|
||||
@@ -131,7 +131,7 @@ export const installPythonDependencies: PrepDefinition = {
|
||||
// there is no equivalent of npm's --ignore-scripts for pip.
|
||||
if (options.ignoreScripts) {
|
||||
log.info(
|
||||
`» skipping python install (bash disabled, python packages can execute arbitrary code)`
|
||||
`» skipping python install (shell disabled, python packages can execute arbitrary code)`
|
||||
);
|
||||
return {
|
||||
language: "python",
|
||||
@@ -139,7 +139,7 @@ export const installPythonDependencies: PrepDefinition = {
|
||||
configFile: config.file,
|
||||
dependenciesInstalled: false,
|
||||
issues: [
|
||||
`skipped: python dependency installation can execute arbitrary code (setup.py, build backends, local path references), which is blocked when bash is disabled`,
|
||||
`skipped: python dependency installation can execute arbitrary code (setup.py, build backends, local path references), which is blocked when shell is disabled`,
|
||||
],
|
||||
};
|
||||
}
|
||||
|
||||
Reference in New Issue
Block a user