fix(security): prevent path traversal in memory content API

This commit is contained in:
zhayujie
2026-04-01 10:03:58 +08:00
parent 1c336380c0
commit 174ee0cafc
4 changed files with 25 additions and 6 deletions

View File

@@ -599,7 +599,7 @@ class CowCliPlugin(Plugin):
page = min(page, total_pages)
installed = set(load_skills_config().keys())
lines = [f"🌐 技能广场 (共 {total} 个技能)", ""]
lines = ["🌐 技能广场", ""]
for s in skills:
name = s.get("name", "")
display = s.get("display_name", "") or name