Jannik/PaperClipAI
1
0 Fork 0
mirror of https://github.com/paperclipai/paperclip.git synced 2026-10-27 02:44:50 +01:00
Code Issues Packages Projects Releases Wiki Activity

Reject prototype-like keys in eval trace headers

Browse Source 
Co-Authored-By: Paperclip <noreply@paperclip.ing>
This commit is contained in:
DottaandPaperclip committed 2026-10-24 13:37:50 -07:00
1 parent 7b75c0349f
commit d1c054e6fd
2 files changed
+3 -2
Download Patch File Download Diff File Expand all files Collapse all files

No files matched your search

packages/paperclip-runner/src/cli/eval-gateway-runtime.test.ts
+2 -1
View File
@@ -91,12 +91,13 @@ it.each([["codex", undefined], ["acpx", "claude"]])("applies the existing %s/%s
} finally { await gateway.close(); }
});
it.each(["identity", "endpoint", "parent", "credential", "company", "rawBodies", "modelEnvironment", "extraField", "unknownExporter"])("rejects observability %s drift before changing the gateway home", async fault => {
it.each(["identity", "endpoint", "parent", "credential", "company", "rawBodies", "modelEnvironment", "extraField", "unknownExporter", "prototypeHeader"])("rejects observability %s drift before changing the gateway home", async fault => {
const f = await fixture(), observation = await observabilityFixture(f);
const descriptor = observation.descriptor as unknown as Record<string, any>;
if (fault === "identity") descriptor.attemptId = "other";
if (fault === "endpoint") descriptor.launch.otelConfig.exporter["otlp-http"].endpoint = "https://api.braintrust.dev/otel/v1/logs";
if (fault === "parent") descriptor.traceId = "3".repeat(32);
if (fault === "prototypeHeader") descriptor.launch.environment.OTEL_EXPORTER_OTLP_LOGS_HEADERS += ",__proto__=ignored";
if (fault === "credential") descriptor.launch.environment.OTEL_EXPORTER_OTLP_LOGS_HEADERS += ",authorization=Bearer%20upstream-secret";
if (fault === "company") descriptor.launch.otelConfig.span_attributes["paperclip.company.id"] = "other";
if (fault === "rawBodies") descriptor.launch.otelConfig.log_guardian_assessments = true;
packages/paperclip-runner/src/cli/eval-observability-runtime.ts
+1 -1
View File
@@ -22,7 +22,7 @@ function text(value: unknown): string {
return value;
}
function decodedMap(value: unknown): Record<string, string> {
const result: Record<string, string> = {};
const result: Record<string, string> = Object.create(null);
for (const item of text(value).split(",")) {
const index = item.indexOf("=");
if (index < 1) throw invalid();