OpenChatBI: Critical Path Traversal Vulnerability in save_report Tool of OpenChatBI

@@ -13,7 +13,8 @@
 class SaveReportInput(BaseModel):
     content: str = Field(description="The content of the report to save")
     title: str = Field(description="The title of the report (will be used in filename)")
-    file_format: str = Field(description="The file format/extension (e.g., 'md', 'csv', 'txt', 'json')")
+    file_format: str = Field(
+        description="The file format/extension, only support 'md', 'csv', 'txt', 'json', 'html', 'xml'")
 
 
 @tool("save_report", args_schema=SaveReportInput, return_direct=False, infer_schema=True)
@@ -23,11 +24,15 @@ def save_report(content: str, title: str, file_format: str = "md") -> str:
     Args:
         content: The content of the report to save
         title: The title of the report (will be used in filename)
-        file_format: The file format/extension (e.g., 'md', 'csv', 'txt', 'json')
+        file_format: The file format/extension, only support 'md', 'csv', 'txt', 'json', 'html', 'xml'
 
     Returns:
         str: Success message with download link or error message
     """
+    allowed_formats = {'md', 'csv', 'txt', 'json', 'html', 'xml'}
+    if file_format not in allowed_formats:
+        raise ValueError(f"Unsupported file format: {file_format}")
+
     try:
         # Get report directory from config
         report_dir = config.get().report_directory
@@ -42,9 +47,6 @@ def save_report(content: str, title: str, file_format: str = "md") -> str:
         clean_title = "".join(c for c in title if c.isalnum() or c in (" ", "-")).rstrip()
         clean_title = clean_title.replace(" ", "_")
 
-        # Ensure file format doesn't have leading dot
-        file_format = file_format.lstrip(".")
-
         # Create filename
         filename = f"{timestamp}_{clean_title}.{file_format}"
         file_path = Path(report_dir) / filename