OpenML
OpenML copied to clipboard
Open Machine Learning
Potential command injection risk in shell invocations that include user-controlled values without shell-escaping. Examples - `openml_OS/helpers/api_helper.php` `validate_arff()`: builds a `sed` command using `$name` and `$did` to prepend info to an...
## ๐งช Automated Testing Workflow This PR introduces a complete automated testing solution for the OpenML repository, establishing the foundation for comprehensive test coverage across the codebase. --- ## ๐...
The Dockerfile uses `php:7.4.33-apache`, but PHP 7.4 reached end-of-life in Nov 2022 and no longer receives security fixes. Why this matters - Security: No upstream patches for CVEs. - Ecosystem:...
### Description Set up a `greetings.yml` workflow to welcome new contributors. ### Tasks - Create `.github/workflows/greetings.yml` - Add messages for first-time issue and PR creators - Include helpful links and...
### Description Set up a `dependency-check.yml` workflow for automated weekly dependency updates. ### Tasks - Create `.github/workflows/dependency-check.yml` - Enable weekly checks for PHP (Composer) and JS (NPM) packages - Configure...
### Description Set up a `stale.yml` workflow to automatically mark inactive issues and PRs as stale. ### Tasks - Create `.github/workflows/stale.yml` - Configure stale timing and messaging - Submit a...
### Description Set up a `labeler.yml` file to automatically apply labels based on file changes and paths. ### Tasks - Create `.github/labeler.yml` - Define label rules for relevant directories and...
Adds JSON error responses for API v1 endpoints. When clients request /api_new/v1/json/*, errors now return JSON instead of XML. Solves #1200 Before : After : ### Changes - Added `openml_OS/views/pages/api_new/v1/json/error-message.tpl.php`...
There is a link Mismatch from https://docs.openml.org/Contributing/ -> https://docs.openml.org/contributing/
Implements server hardening from #1268: - `docker/config/php.ini`: set `expose_php = Off` - `docker/config/php.ini`: set `max_input_time = 3600` to support large multipart parsing - `docker/config/api.conf`: remove `Indexes` from `` Options Rationale:...