mirror of
https://github.com/saymrwulf/prophet.git
synced 2026-06-09 00:31:01 +00:00
An attacker could access random URL from the executing server if model is crafted. It happens because pd.read_json checks if the parameter is string contains URL and loads it in the case. The fix enforcing using parameter as a JSON. Co-authored-by: Alex Barouski <barouski@fb.com> |
||
|---|---|---|
| .. | ||
| tests | ||
| __init__.py | ||
| diagnostics.py | ||
| forecaster.py | ||
| hdays.py | ||
| make_holidays.py | ||
| models.py | ||
| plot.py | ||
| serialize.py | ||
| utilities.py | ||