feat:Fix for n8n sandbox escape in sample semantic node - #70
Open
Xiu11111 wants to merge 1 commit into
Open
Conversation
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
VulnGym Issue #6 — n8n 沙箱逃逸样本语义节点修正
任务说明
本工作响应 VulnGym Issue #6:修正 n8n 沙箱逃逸样本的入口点和关键操作语义。
原始数据集中部分 n8n 相关样本的
entry_point、critical_operation、trace字段存在语义不准确的问题:entry_point指向装饰器、闭合括号等无意义标记,未体现外部输入如何进入漏洞链路critical_operation落在 sanitizer 声明、静态字典定义等非执行/非绕过点上,不能代表漏洞真正成立的关键操作trace与修正后的入口点和关键操作不一致覆盖样本
交付内容
详细修复报告、变更对照表和修复后的完整 JSONL 文件位于 my_work/ 目录:
所有
file/line/code均通过对应用 commit 的原始源码逐行核实,修复数据满足 SCHEMA.md 基础约束。