mirror of
https://github.com/CopilotKit/CopilotKit.git
synced 2026-09-14 16:26:20 +08:00
edc77f8090
The python rewriter in apply_isolation previously interpolated $slug directly into the inline python source via bash. A slug containing a single quote would break the python literal. Internal-tool risk only (slug is developer-typed), but cheap to harden. Pass slug via SHOWCASE_ISO_SLUG env var and read os.environ.get(...) inside the python heredoc. Defense-in-depth; no behavior change for valid slugs.