Samin061 opened a new pull request, #71832: URL: https://github.com/apache/airflow/pull/71832
**Path traversal via unsanitized Gemini batch-job display_name** `GenAIGeminiCreateBatchJobOperator` and `GenAIGeminiCreateEmbeddingsBatchJobOperator` name the local results file after `job.display_name`, a field returned in the batch-job metadata. `job.name` is already sanitized against `/` at that spot, but `display_name` (used first) is not, so a `..` in it lands the `.jsonl` outside `results_folder` on the worker. The check now resolves the join and refuses anything escaping `results_folder`, applied at both sites, matching the `sync_to_local_dir` guards already in the GCS and S3 hooks. --- ##### Was generative AI tooling used to co-author this PR? - [ ] Yes (please specify the tool below) --- * Read the **[Pull Request Guidelines](https://github.com/apache/airflow/blob/main/contributing-docs/05_pull_requests.rst#pull-request-guidelines)** for more information. -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
