Limit permitted commands to those listed in runner.yaml config file.
Fixes API calls to send correct invalid status for both non-existing and not permitted commands
Type of Change
[x] New feature
[x] Bug fix
[x] Documentation update
[x] Refactoring
[ ] Security patch
[ ] UI/UX improvement
Description
Previously, any commands placed in script directory could be executed. Now, only the listed commands in the configuration file are executed. This is a security improvement.
Testing
The end-to-end tests have been performed. Unit tests are completed only for query validation code.
Checklist
[x] My code adheres to the coding and style guidelines of the project.
[ ] unit tests are missing.
[x] I have made corresponding changes to the documentation.
Limit permitted commands in Runner
Type of Change
Description
Previously, any commands placed in
script
directory could be executed. Now, only the listed commands in the configuration file are executed. This is a security improvement.Testing
The end-to-end tests have been performed. Unit tests are completed only for query validation code.
Checklist