Codex review 教程 · 实际离线参考结果

人工 finding + 实际假数据验证

{
  "identity": "manual reference findings; Codex review not run",
  "finding": {
    "file": "route.py",
    "line": 5,
    "priority": "P1 in this fake fixture",
    "cause": "decoded untrusted path joined without containment check"
  },
  "cases": [
    {
      "input": "../canary.txt",
      "broken": "fake canary read",
      "fixed": "PermissionError"
    },
    {
      "input": "%2e%2e%2fcanary.txt",
      "broken": "fake canary read",
      "fixed": "PermissionError"
    }
  ],
  "sourceShaBefore": "ac1adce45ccbd696cbd7a76792bada91ac56f8aebcd78d5b9e05ddee156883af",
  "sourceShaAfter": "ac1adce45ccbd696cbd7a76792bada91ac56f8aebcd78d5b9e05ddee156883af"
}