Skip to content

fix: clear 0.4.3 blockers with cancel-safe teardown #1172

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
burtenshaw merged 15 commits into from
Sep 16, 2026
Merged

fix: clear 0.4.3 blockers with cancel-safe teardown #1172

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
15 commits
Select commit Hold shift + click to select a range
f438c4d
fix: clear 0.4.3 release blockers
cursoragent Sep 16, 2026
63f4355
style: format socket close scheduler
cursoragent Sep 16, 2026
30a23fb
Merge remote-tracking branch 'origin/main' into cursor/openenv-releas…
cursoragent Sep 16, 2026
5d177e3
fix(discovery): fail closed on relative home cache
cursoragent Sep 16, 2026
366941d
fix(client): preserve parent teardown on child cancellation
cursoragent Sep 16, 2026
3b06765
fix(discovery): reject Unicode line separators
cursoragent Sep 16, 2026
f1069e8
fix(client): close every child despite cancellation
cursoragent Sep 16, 2026
55255ab
Merge remote-tracking branch 'origin/main' into cursor/openenv-releas…
cursoragent Sep 16, 2026
2575ab4
Revert "fix(mcp): production JSON-RPC routing with sync-safe teardown…
cursoragent Sep 16, 2026
97b7688
fix(mcp): preserve sync-safe teardown after revert
cursoragent Sep 16, 2026
157e125
style(mcp): document best-effort HTTP cleanup
cursoragent Sep 16, 2026
da95efb
Merge main while retaining safe MCP rollback
cursoragent Sep 16, 2026
de95e72
fix(mcp): isolate explicit HTTP tools mode
cursoragent Sep 16, 2026
5de7a2d
chore: separate shared MCP follow-up
cursoragent Sep 16, 2026
d97979c
Merge remote-tracking branch 'origin/main' into cursor/openenv-releas…
cursoragent Sep 16, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
5 changes: 4 additions & 1 deletion docs/source/guides/catalog-discovery.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -164,7 +164,10 @@ does not require fetching candidate resource URLs.
JSON Schema validation is necessary but is not the whole profile contract.
The packaged schemas enforce object shape, required fields, relative-path
safety, supported literals, conditional artifact/license-evidence presence, and
exactly one orchestration interface. Other rules require semantic validation:
exactly one orchestration interface.
The relative-path profile permits printable UTF-8 (including spaces), but
rejects C0, DEL, C1, and Unicode line/paragraph separators so untrusted metadata
cannot forge CLI or log lines. Other rules require semantic validation:

| Subject | Additional rule |
|---------|-----------------|
Expand Down
14 changes: 13 additions & 1 deletion src/openenv/auto/_discovery.py
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -345,9 +345,21 @@ def _default_cache_file() -> Path:
shared, world-writable temporary directory. A fixed path under the shared temp dir
lets another local user pre-create the cache file and redirect discovery to
attacker-controlled import paths (`import_module` on a cached `client_module_path`).
Per the XDG Base Directory specification, relative `XDG_CACHE_HOME` values are
ignored so an untrusted working tree cannot supply a victim-owned cache file.
The fallback home must itself be absolute; otherwise discovery fails closed.
"""
base = os.environ.get("XDG_CACHE_HOME")
root = Path(base) if base else Path.home() / ".cache"
if base and Path(base).is_absolute():

@cursor cursor Bot Sep 16, 2026

Copy link
Copy Markdown
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Implements the XDG-spec hardening flagged during the #1167 review: a relative XDG_CACHE_HOME is now ignored (rather than resolved CWD-relative, which an untrusted checkout could exploit to plant a cache), and the ~/.cache fallback fails closed with RuntimeError when Path.home() isn't absolute. Good defense-in-depth on top of #1167's trusted-open/atomic-save. Covered by test_relative_xdg_cache_home_cannot_redirect_into_working_tree and test_relative_home_cannot_restore_a_relative_cache_path.

root = Path(base)
else:
home = Path.home()
if not home.is_absolute():
raise RuntimeError(
"discovery cache requires an absolute home directory when "
"XDG_CACHE_HOME is unset or relative"
)
root = home / ".cache"
return root / "openenv" / "discovery_cache.json"


Expand Down
146 changes: 117 additions & 29 deletions src/openenv/core/env_client.py
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -255,6 +255,15 @@ async def _best_effort_close(ws: ClientConnection) -> None:
pass # Best effort


async def _best_effort_graceful_close(ws: ClientConnection) -> None:
"""Notify the server, then close a socket without propagating failures."""
try:
await ws.send(json.dumps({"type": "close"}))
except (Exception, asyncio.CancelledError):
pass # Best effort
await _best_effort_close(ws)


class EnvClient(ABC, Generic[ActT, ObsT, StateT]):
"""
Async environment client for persistent sessions.
Expand Down Expand Up @@ -538,6 +547,13 @@ async def _connect_async(self) -> "EnvClient":
self._ws = None
self._ws_loop = None

# A timed-out request drops its socket immediately but closes it in the
# background so the timeout itself remains prompt. Wait for that close
# before opening a replacement: the old server-side session continues
# occupying a capacity slot until the close handshake finishes, and
# many environments allow only one session.
await self._drain_pending_close_tasks()

@cursor cursor Bot Sep 16, 2026

Copy link
Copy Markdown
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Key correctness fix for single-session environments. A timed-out _receive() detaches its socket and closes it in the background (to keep the timeout prompt); reconnecting must wait for that close handshake to finish before opening a replacement, otherwise the old server-side session still occupies the (often capacity-1) slot and the retry is rejected. Draining here — after the early-return for a reusable same-loop socket, so healthy reuse isn't penalized — is the right spot. Verified by test_reconnect_waits_for_dropped_socket_to_release_capacity.


try:
self._start_provider_if_needed()
except Exception:
Expand Down Expand Up @@ -573,24 +589,51 @@ async def _connect_async(self) -> "EnvClient":
def disconnect(self) -> Any:
return self._dispatch(self._disconnect_async)

def _schedule_socket_close(
self, ws: ClientConnection, *, notify_server: bool = False
) -> asyncio.Task[None]:
"""Schedule and track a socket close until its handshake finishes."""
close_coro = (
_best_effort_graceful_close(ws) if notify_server else _best_effort_close(ws)
)
close_task = asyncio.create_task(close_coro)
self._pending_close_tasks.add(close_task)
close_task.add_done_callback(self._pending_close_tasks.discard)
return close_task

async def _disconnect_async(self) -> None:
"""Close the WebSocket connection."""
if self._ws is not None:
ws = self._ws
ws_loop = self._ws_loop
same_loop = ws_loop is asyncio.get_running_loop()
try:
if same_loop:
await ws.send(json.dumps({"type": "close"}))
except Exception:
pass # Best effort
try:
if same_loop:
await ws.close()
except Exception:
pass
# Detach first so cancellation during the close handshake cannot
# leave a stale socket cached for a later operation.
self._ws = None
self._ws_loop = None
same_loop = ws_loop is asyncio.get_running_loop()
if same_loop:
# Keep ownership of the handshake if this caller is cancelled.
# A later close/reconnect drains the task before tearing down
# the loop or opening a replacement server session.
close_task = self._schedule_socket_close(ws, notify_server=True)
await asyncio.shield(close_task)

async def _drain_pending_close_tasks(self) -> None:
"""Wait for background socket closes owned by the current event loop.

Shielding keeps cancellation of the caller from cancelling the close
tasks themselves. This matters both before reconnecting, when the old
server session must release its capacity slot, and during explicit
client shutdown.
"""
loop = asyncio.get_running_loop()
tasks = [
task
for task in tuple(self._pending_close_tasks)
if not task.done() and task.get_loop() is loop
]
if tasks:
await asyncio.shield(asyncio.gather(*tasks, return_exceptions=True))

async def _ensure_connected(self) -> None:
"""Ensure WebSocket connection is established on the current loop.
Expand Down Expand Up @@ -641,9 +684,7 @@ async def _receive(self) -> Dict[str, Any]:
# would actually block for up to 10s before its deadline was
# honored. Scheduling it lets the exception propagate
# immediately while the close still happens in the background.
close_task = asyncio.ensure_future(_best_effort_close(ws))
self._pending_close_tasks.add(close_task)
close_task.add_done_callback(self._pending_close_tasks.discard)
self._schedule_socket_close(ws)
raise
return json.loads(raw)

Expand Down Expand Up @@ -950,29 +991,73 @@ async def _state_async(self) -> StateT:
def close(self) -> Any:
return self._dispatch(self._close_async)

async def _close_child_clients(self) -> asyncio.CancelledError | None:
"""Close every captured child while deferring caller cancellation."""
children = list(self._child_clients)
self._child_clients.clear()
close_tasks = []
deferred_cancellation: asyncio.CancelledError | None = None

for child in children:
try:
close_tasks.append(asyncio.ensure_future(child.close()))
except asyncio.CancelledError as exc:
if deferred_cancellation is None:
deferred_cancellation = exc
except Exception:
pass # Best effort

if close_tasks:
close_group = asyncio.gather(*close_tasks, return_exceptions=True)
while not close_group.done():
try:
await asyncio.shield(close_group)
except asyncio.CancelledError as exc:
if deferred_cancellation is None:
deferred_cancellation = exc

for result in close_group.result():
if (
isinstance(result, asyncio.CancelledError)
and deferred_cancellation is None
):
deferred_cancellation = result

return deferred_cancellation

async def _close_async(self) -> None:
"""
Close the WebSocket connection and clean up resources.

If this client was created via from_docker_image() or from_env(),
this will also stop and remove the associated container/process.
"""
for child in list(self._child_clients):
with suppress(Exception):
await child.close()
self._child_clients.clear()

deferred_cancellation: asyncio.CancelledError | None = None
try:
# Wait out any backgrounded closes from a dropped socket (see
# `_receive()` / `_best_effort_close`) so a real close() call still
# sees the handshake through. SyncEnvClient.close() waits for
# `_close_async()` before stopping its loop, so the relevant risk
# is async-context cancellation of close itself — not `_stop_loop()`.
# Keep this gather inside the provider-teardown try/finally so a
# cancelled close cannot skip container/process cleanup.
if self._pending_close_tasks:
await asyncio.gather(*self._pending_close_tasks, return_exceptions=True)
await self._disconnect_async()
try:
try:
child_cancellation = await self._close_child_clients()
except asyncio.CancelledError as exc:
child_cancellation = exc
if child_cancellation is not None:
deferred_cancellation = child_cancellation

# A real close waits out backgrounded closes, while shielding
# their socket handshakes from cancellation.
try:
await self._drain_pending_close_tasks()
except asyncio.CancelledError as exc:
if deferred_cancellation is None:
deferred_cancellation = exc
finally:
# Run even when child or pending-close cleanup is cancelled. A
# client may already have reconnected, and that current socket
# must not remain cached or open during teardown.
try:
await self._disconnect_async()
except asyncio.CancelledError as exc:
if deferred_cancellation is None:
deferred_cancellation = exc
finally:
try:
if self._provider is not None:
Expand All @@ -986,6 +1071,9 @@ async def _close_async(self) -> None:
self._base_url = None
self._ws_url = None

if deferred_cancellation is not None:
raise deferred_cancellation

@cursor cursor Bot Sep 16, 2026

Copy link
Copy Markdown
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

The deferred-cancellation teardown is the crux of this PR and looks correct: child-close → pending-close drain → _disconnect_async (in a finally) → provider stop (outer finally) all run even when the caller is cancelled, and the first captured CancelledError is re-raised only after cleanup completes. This closes the prior regression where a cancel during the pending-close gather skipped provider teardown and leaked the container/process. The 4 new teardown tests cover child-cancel, current-socket-cancel, and pending+current-socket-cancel.

Optional (non-blocking): _close_async now nests three try/except CancelledError/finally layers — a one-line comment naming the layers (children → pending → disconnect → provider) would ease future maintenance.


def _stop_provider_best_effort(self) -> None:
"""Stop the underlying provider directly, ignoring any errors.

Expand Down
14 changes: 12 additions & 2 deletions src/openenv/discovery/models.py
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -53,7 +53,12 @@ def relative_path(value: str) -> str:
return value
if (
not value
or "\x00" in value
or any(
ord(character) < 0x20
or 0x7F <= ord(character) <= 0x9F
or ord(character) in (0x2028, 0x2029)
for character in value
)
or "\\" in value
or PurePosixPath(value).is_absolute()
or any(part in ("", ".", "..") for part in value.split("/"))
Expand All @@ -64,8 +69,12 @@ def relative_path(value: str) -> str:

# Positive components exclude "." and ".." without lookaround, which some
# JSON Schema regex engines do not support.
_CONTROL_CHARACTER_PATTERN = r"[\x00-\x1f\x7f-\x9f\u2028\u2029]"
_PATH_COMPONENT_PATTERN = (
r"(?:[^./\\\x00]|\.[^./\\\x00]|\.\.[^./\\\x00]|\.\.\.)[^/\\\x00]*"
r"(?:[^./\\\x00-\x1f\x7f-\x9f\u2028\u2029]"
r"|\.[^./\\\x00-\x1f\x7f-\x9f\u2028\u2029]"
r"|\.\.[^./\\\x00-\x1f\x7f-\x9f\u2028\u2029]"
r"|\.\.\.)[^/\\\x00-\x1f\x7f-\x9f\u2028\u2029]*"
)
RelativePath = Annotated[
NonEmpty,
Expand All @@ -79,6 +88,7 @@ def relative_path(value: str) -> str:
rf"(?:/{_PATH_COMPONENT_PATTERN})*)$"
),
},
{"not": {"pattern": _CONTROL_CHARACTER_PATTERN}},

@cursor cursor Bot Sep 16, 2026

Copy link
Copy Markdown
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

This separate unanchored negative clause (not just widening the char classes inside the main anchored pattern) is the load-bearing part. jsonschema compiles these patterns with Python's re, whose $ matches before a trailing , so the anchored ^…$ pattern alone would still admit e.g. envs/foo . The {"not": {"pattern": "[\\x00-\\x1f\\x7f-\\x9f\\u2028\\u2029]"}} clause rejects control chars anywhere and closes that bypass — which is exactly why the test suite moves envs/trailing , . , .. , etc. from the valid list to the invalid list (a real latent hole, not just a test churn).

Model (relative_path) and all four schemas use the identical codepoint set (0x00–0x1F, 0x7F–0x9F, U+2028/U+2029), so model↔schema parity holds — nicely pinned by test_environment_locator_is_a_safe_repository_relative_path asserting both raise, and test_schema_and_model_preserve_valid_relative_locators keeping envs/café/envs/東京 valid.

]
}
),
Expand Down
35 changes: 30 additions & 5 deletions src/openenv/discovery/schemas/0.1-draft/catalog.schema.json
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -55,7 +55,12 @@
"path": {
"allOf": [
{
"pattern": "^(?:\\.|(?:[^./\\\\\\x00]|\\.[^./\\\\\\x00]|\\.\\.[^./\\\\\\x00]|\\.\\.\\.)[^/\\\\\\x00]*(?:/(?:[^./\\\\\\x00]|\\.[^./\\\\\\x00]|\\.\\.[^./\\\\\\x00]|\\.\\.\\.)[^/\\\\\\x00]*)*)$"
"pattern": "^(?:\\.|(?:[^./\\\\\\x00-\\x1f\\x7f-\\x9f\\u2028\\u2029]|\\.[^./\\\\\\x00-\\x1f\\x7f-\\x9f\\u2028\\u2029]|\\.\\.[^./\\\\\\x00-\\x1f\\x7f-\\x9f\\u2028\\u2029]|\\.\\.\\.)[^/\\\\\\x00-\\x1f\\x7f-\\x9f\\u2028\\u2029]*(?:/(?:[^./\\\\\\x00-\\x1f\\x7f-\\x9f\\u2028\\u2029]|\\.[^./\\\\\\x00-\\x1f\\x7f-\\x9f\\u2028\\u2029]|\\.\\.[^./\\\\\\x00-\\x1f\\x7f-\\x9f\\u2028\\u2029]|\\.\\.\\.)[^/\\\\\\x00-\\x1f\\x7f-\\x9f\\u2028\\u2029]*)*)$"
},
{
"not": {
"pattern": "[\\x00-\\x1f\\x7f-\\x9f\\u2028\\u2029]"
}
}
],
"maxLength": 8192,
Expand Down Expand Up @@ -405,7 +410,12 @@
"path": {
"allOf": [
{
"pattern": "^(?:\\.|(?:[^./\\\\\\x00]|\\.[^./\\\\\\x00]|\\.\\.[^./\\\\\\x00]|\\.\\.\\.)[^/\\\\\\x00]*(?:/(?:[^./\\\\\\x00]|\\.[^./\\\\\\x00]|\\.\\.[^./\\\\\\x00]|\\.\\.\\.)[^/\\\\\\x00]*)*)$"
"pattern": "^(?:\\.|(?:[^./\\\\\\x00-\\x1f\\x7f-\\x9f\\u2028\\u2029]|\\.[^./\\\\\\x00-\\x1f\\x7f-\\x9f\\u2028\\u2029]|\\.\\.[^./\\\\\\x00-\\x1f\\x7f-\\x9f\\u2028\\u2029]|\\.\\.\\.)[^/\\\\\\x00-\\x1f\\x7f-\\x9f\\u2028\\u2029]*(?:/(?:[^./\\\\\\x00-\\x1f\\x7f-\\x9f\\u2028\\u2029]|\\.[^./\\\\\\x00-\\x1f\\x7f-\\x9f\\u2028\\u2029]|\\.\\.[^./\\\\\\x00-\\x1f\\x7f-\\x9f\\u2028\\u2029]|\\.\\.\\.)[^/\\\\\\x00-\\x1f\\x7f-\\x9f\\u2028\\u2029]*)*)$"
},
{
"not": {
"pattern": "[\\x00-\\x1f\\x7f-\\x9f\\u2028\\u2029]"
}
}
],
"maxLength": 8192,
Expand Down Expand Up @@ -472,7 +482,12 @@
"path": {
"allOf": [
{
"pattern": "^(?:\\.|(?:[^./\\\\\\x00]|\\.[^./\\\\\\x00]|\\.\\.[^./\\\\\\x00]|\\.\\.\\.)[^/\\\\\\x00]*(?:/(?:[^./\\\\\\x00]|\\.[^./\\\\\\x00]|\\.\\.[^./\\\\\\x00]|\\.\\.\\.)[^/\\\\\\x00]*)*)$"
"pattern": "^(?:\\.|(?:[^./\\\\\\x00-\\x1f\\x7f-\\x9f\\u2028\\u2029]|\\.[^./\\\\\\x00-\\x1f\\x7f-\\x9f\\u2028\\u2029]|\\.\\.[^./\\\\\\x00-\\x1f\\x7f-\\x9f\\u2028\\u2029]|\\.\\.\\.)[^/\\\\\\x00-\\x1f\\x7f-\\x9f\\u2028\\u2029]*(?:/(?:[^./\\\\\\x00-\\x1f\\x7f-\\x9f\\u2028\\u2029]|\\.[^./\\\\\\x00-\\x1f\\x7f-\\x9f\\u2028\\u2029]|\\.\\.[^./\\\\\\x00-\\x1f\\x7f-\\x9f\\u2028\\u2029]|\\.\\.\\.)[^/\\\\\\x00-\\x1f\\x7f-\\x9f\\u2028\\u2029]*)*)$"
},
{
"not": {
"pattern": "[\\x00-\\x1f\\x7f-\\x9f\\u2028\\u2029]"
}
}
],
"maxLength": 8192,
Expand Down Expand Up @@ -510,7 +525,12 @@
"items": {
"allOf": [
{
"pattern": "^(?:\\.|(?:[^./\\\\\\x00]|\\.[^./\\\\\\x00]|\\.\\.[^./\\\\\\x00]|\\.\\.\\.)[^/\\\\\\x00]*(?:/(?:[^./\\\\\\x00]|\\.[^./\\\\\\x00]|\\.\\.[^./\\\\\\x00]|\\.\\.\\.)[^/\\\\\\x00]*)*)$"
"pattern": "^(?:\\.|(?:[^./\\\\\\x00-\\x1f\\x7f-\\x9f\\u2028\\u2029]|\\.[^./\\\\\\x00-\\x1f\\x7f-\\x9f\\u2028\\u2029]|\\.\\.[^./\\\\\\x00-\\x1f\\x7f-\\x9f\\u2028\\u2029]|\\.\\.\\.)[^/\\\\\\x00-\\x1f\\x7f-\\x9f\\u2028\\u2029]*(?:/(?:[^./\\\\\\x00-\\x1f\\x7f-\\x9f\\u2028\\u2029]|\\.[^./\\\\\\x00-\\x1f\\x7f-\\x9f\\u2028\\u2029]|\\.\\.[^./\\\\\\x00-\\x1f\\x7f-\\x9f\\u2028\\u2029]|\\.\\.\\.)[^/\\\\\\x00-\\x1f\\x7f-\\x9f\\u2028\\u2029]*)*)$"
},
{
"not": {
"pattern": "[\\x00-\\x1f\\x7f-\\x9f\\u2028\\u2029]"
}
}
],
"maxLength": 8192,
Expand All @@ -524,7 +544,12 @@
"root": {
"allOf": [
{
"pattern": "^(?:\\.|(?:[^./\\\\\\x00]|\\.[^./\\\\\\x00]|\\.\\.[^./\\\\\\x00]|\\.\\.\\.)[^/\\\\\\x00]*(?:/(?:[^./\\\\\\x00]|\\.[^./\\\\\\x00]|\\.\\.[^./\\\\\\x00]|\\.\\.\\.)[^/\\\\\\x00]*)*)$"
"pattern": "^(?:\\.|(?:[^./\\\\\\x00-\\x1f\\x7f-\\x9f\\u2028\\u2029]|\\.[^./\\\\\\x00-\\x1f\\x7f-\\x9f\\u2028\\u2029]|\\.\\.[^./\\\\\\x00-\\x1f\\x7f-\\x9f\\u2028\\u2029]|\\.\\.\\.)[^/\\\\\\x00-\\x1f\\x7f-\\x9f\\u2028\\u2029]*(?:/(?:[^./\\\\\\x00-\\x1f\\x7f-\\x9f\\u2028\\u2029]|\\.[^./\\\\\\x00-\\x1f\\x7f-\\x9f\\u2028\\u2029]|\\.\\.[^./\\\\\\x00-\\x1f\\x7f-\\x9f\\u2028\\u2029]|\\.\\.\\.)[^/\\\\\\x00-\\x1f\\x7f-\\x9f\\u2028\\u2029]*)*)$"
},
{
"not": {
"pattern": "[\\x00-\\x1f\\x7f-\\x9f\\u2028\\u2029]"
}
}
],
"maxLength": 8192,
Expand Down
14 changes: 12 additions & 2 deletions src/openenv/discovery/schemas/0.1-draft/declaration.schema.json
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -25,7 +25,12 @@
"source": {
"allOf": [
{
"pattern": "^(?:\\.|(?:[^./\\\\\\x00]|\\.[^./\\\\\\x00]|\\.\\.[^./\\\\\\x00]|\\.\\.\\.)[^/\\\\\\x00]*(?:/(?:[^./\\\\\\x00]|\\.[^./\\\\\\x00]|\\.\\.[^./\\\\\\x00]|\\.\\.\\.)[^/\\\\\\x00]*)*)$"
"pattern": "^(?:\\.|(?:[^./\\\\\\x00-\\x1f\\x7f-\\x9f\\u2028\\u2029]|\\.[^./\\\\\\x00-\\x1f\\x7f-\\x9f\\u2028\\u2029]|\\.\\.[^./\\\\\\x00-\\x1f\\x7f-\\x9f\\u2028\\u2029]|\\.\\.\\.)[^/\\\\\\x00-\\x1f\\x7f-\\x9f\\u2028\\u2029]*(?:/(?:[^./\\\\\\x00-\\x1f\\x7f-\\x9f\\u2028\\u2029]|\\.[^./\\\\\\x00-\\x1f\\x7f-\\x9f\\u2028\\u2029]|\\.\\.[^./\\\\\\x00-\\x1f\\x7f-\\x9f\\u2028\\u2029]|\\.\\.\\.)[^/\\\\\\x00-\\x1f\\x7f-\\x9f\\u2028\\u2029]*)*)$"
},
{
"not": {
"pattern": "[\\x00-\\x1f\\x7f-\\x9f\\u2028\\u2029]"
}
}
],
"maxLength": 8192,
Expand Down Expand Up @@ -104,7 +109,12 @@
{
"allOf": [
{
"pattern": "^(?:\\.|(?:[^./\\\\\\x00]|\\.[^./\\\\\\x00]|\\.\\.[^./\\\\\\x00]|\\.\\.\\.)[^/\\\\\\x00]*(?:/(?:[^./\\\\\\x00]|\\.[^./\\\\\\x00]|\\.\\.[^./\\\\\\x00]|\\.\\.\\.)[^/\\\\\\x00]*)*)$"
"pattern": "^(?:\\.|(?:[^./\\\\\\x00-\\x1f\\x7f-\\x9f\\u2028\\u2029]|\\.[^./\\\\\\x00-\\x1f\\x7f-\\x9f\\u2028\\u2029]|\\.\\.[^./\\\\\\x00-\\x1f\\x7f-\\x9f\\u2028\\u2029]|\\.\\.\\.)[^/\\\\\\x00-\\x1f\\x7f-\\x9f\\u2028\\u2029]*(?:/(?:[^./\\\\\\x00-\\x1f\\x7f-\\x9f\\u2028\\u2029]|\\.[^./\\\\\\x00-\\x1f\\x7f-\\x9f\\u2028\\u2029]|\\.\\.[^./\\\\\\x00-\\x1f\\x7f-\\x9f\\u2028\\u2029]|\\.\\.\\.)[^/\\\\\\x00-\\x1f\\x7f-\\x9f\\u2028\\u2029]*)*)$"
},
{
"not": {
"pattern": "[\\x00-\\x1f\\x7f-\\x9f\\u2028\\u2029]"
}
}
],
"maxLength": 8192,
Expand Down
Loading
Loading