From 64dbc518aae36943037b181181dd7d17c1f9396d Mon Sep 17 00:00:00 2001 From: amir-rezaei <31731671+amir-rezaei@users.noreply.github.com> Date: Fri, 24 Jul 2026 14:18:44 +0200 Subject: [PATCH] docs: fix grammar and missing articles in SECURITY.md (#17360) ## Description This PR fixes grammar and missing articles in `SECURITY.md`. ## Details Updated sentence phrasing (`numpy module has...` $\to$ `the numpy module has...` and `function directly execute` $\to$ `function to directly execute`). Co-authored-by: ferkans-amir --- SECURITY.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/SECURITY.md b/SECURITY.md index 7b95ba4cc7..61f6ff3ed8 100644 --- a/SECURITY.md +++ b/SECURITY.md @@ -18,7 +18,7 @@ main ### Actual behavior The restricted_loads function at [api/utils/__init__.py#L215](https://github.com/infiniflow/ragflow/blob/main/api/utils/__init__.py#L215) is still vulnerable leading via code execution. -The main reason is that numpy module has a numpy.f2py.diagnose.run_command function directly execute commands, but the restricted_loads function allows users import functions in module numpy. +The main reason is that the numpy module has a numpy.f2py.diagnose.run_command function to directly execute commands, but the restricted_loads function allows users to import functions in the numpy module. ### Steps to reproduce