mirror of https://github.com/OrcaSlicer/OrcaSlicer.git synced 2026-10-09 08:41:14 +00:00

Files

T

Ian Chua 86ff2a9de7 fix: avoid substring denies in audit path keywords (#16243 )

## Summary

   Fixes #15944.

   The plugin audit deny-list matched `secret`, `cert`, and
 `conf` as substrings of every path component. This blocked
 valid imports during plugin capability execution, for example
 `numpy/__config__.py`, because `conf` appeared inside the
 module filename.

   This PR changes deny keyword matching to use whole path
 components instead of substring matches. It keeps the
 intended protections for sensitive locations and config
 files, while allowing dependency and stdlib modules whose
 names merely contain those strings.

   ## Changes

   - Match denied path keywords as whole components instead of
 substrings.
   - Keep denying sensitive directory names such as:
     - `secret`
     - `secrets`
     - `cert`
     - `certs`
     - `certificate`
     - `certificates`
     - `conf`
     - `config`
   - Keep denying config files by extension:
     - `.conf`
     - `.ini`
   - Allow legitimate Python module/package paths such as:
     - `numpy/__config__.py`
     - `numpy/_core/_ufunc_config.py`
     - `configparser.py`
     - `sysconfig.py`
     - `logging/config.py`
     - `certifi/cacert.pem`
   - Include the denied target and reason in `PermissionError`
 messages when the audit hook blocks an operation.
   - Remove an unused `<memory>` include from
 `PluginAuditManager.hpp`.

   ## Why

   The previous substring matching caused false positives for
 common dependency and standard-library paths. It also made
 failures hard to diagnose because the Python exception did
 not include the refused path.

   The new behavior is narrower: it blocks sensitive path
 components and config file extensions without treating
 unrelated names like `__config__.py`, `configparser.py`,
 `Conference`, or `Concert` as secrets.

   ## Testing

   - Added/updated unit coverage in
 `tests/slic3rutils/test_plugin_audit.cpp` for:
     - whole-component keyword matches
     - `.conf` / `.ini` blocking
     - case-insensitive matching
     - false-positive paths from #15944

Plugin used for testing:

[orca_audit_numpy_config_repro.py](https://github.com/user-attachments/files/33143848/orca_audit_numpy_config_repro.py)

2026-10-09 15:20:38 +08:00

catch2

Fix Windows test linking: use main() instead of wmain() (#12939 )

2026-04-24 14:07:24 +08:00

cli

Fix a crash on loading a 3MF with empty project settings (#16016 )

2026-10-09 12:07:03 +08:00

compare_analyzer

show_temp_plot: add precool zone visualization

2026-07-16 22:43:03 +01:00

data

fix: missing chamfers on STEP import since the OCCT 8.0.1 update (#16290 )

2026-10-08 18:10:37 -03:00

fff_print

Fix Adaptive and Support Cubic infill density with modifiers (#16295 )

2026-10-08 18:28:56 -03:00

filament_group

Stop Exporting Names Through Usings in the Remaining Headers (#16250 )

2026-10-08 13:59:12 +08:00

libnest2d

Remove Unused Project Includes and Forward-Declare Where a Type Is Only Referenced (#16099 )

2026-10-05 16:47:17 +08:00

libslic3r

Fail cleanly on a truncated or corrupt PNG (#16014 )

2026-10-09 11:52:55 +08:00

sla_print

Stop Exporting Names Through Usings in the Remaining Headers (#16250 )

2026-10-08 13:59:12 +08:00

slic3rutils

fix: avoid substring denies in audit path keywords (#16243 )

2026-10-09 15:20:38 +08:00

AGENTS.md

ci: build Windows with build_win.bat and drop the old scripts (#15721 )

2026-09-16 09:50:27 -03:00

CATCH2.md

docs(tests): add a layered guide to the test tree (#14628 )

2026-07-23 09:19:37 -03:00

CLAUDE.md

docs(tests): add a layered guide to the test tree (#14628 )

2026-07-23 09:19:37 -03:00

CMakeLists.txt

refactor: printer agent infrastructure changes to work with other printer agents aside from bambu (#15710 )

2026-10-01 00:30:44 +08:00

README.md

docs(tests): add a layered guide to the test tree (#14628 )

2026-07-23 09:19:37 -03:00

test_utils.hpp

Add Missing Includes Across the Remaining Sources and Tests (#16071 )

2026-10-03 13:45:21 +08:00

update_catch2.sh

Fix tests (#10906 )

2025-12-08 22:42:11 +08:00

README.md

OrcaSlicer tests

Building, running and writing tests is documented on the wiki, under How to Test.

Two files here rather than there, because coding agents only read what is in the repository:

AGENTS.md is the same guidance in short form, and is what an agent working under tests/ picks up.
CATCH2.md is the Catch2 reference, including the mistakes that break a test at runtime.