fix: secure SQLite database paths to prevent path traversal

.gitignore

@@ -17,6 +17,9 @@ yarn-error.log*
 pnpm-lock.yaml
 package-lock.json
 uv.lock
+jsons/client_id.json
+credentials.json
+jsons/apikey.json
 
 # Python caches and artifacts
 __pycache__/

backend/python_nlp/smart_filters.py

@@ -8,13 +8,17 @@
 
 import json
 import logging
+import os
 import re
 import sqlite3
 from collections import Counter, defaultdict
 from dataclasses import dataclass
 from datetime import datetime, timedelta
 from typing import Any, Dict, List, Optional, Set
 
+# Project root directory
+ROOT_DIR = os.path.dirname(os.path.dirname(os.path.dirname(os.path.dirname(__file__))))
+
 
 @dataclass
 class EmailFilter:
@@ -86,8 +90,12 @@ class SmartFilterManager:
     of email filters, using a SQLite database for persistence.
     """
 
-    def __init__(self, db_path: str = "smart_filters.db"):
+    def __init__(self, db_path: str = None):
         """Initializes the SmartFilterManager."""
+        if db_path is None:
+            db_path = os.path.join(ROOT_DIR, "smart_filters.db")
+        elif not os.path.isabs(db_path):
+            db_path = os.path.join(ROOT_DIR, db_path)
         self.db_path = db_path
         self.logger = logging.getLogger(__name__)
         self.conn = None

pyproject.toml

@@ -52,7 +52,7 @@ exclude = '''
   | \.hg
   | \.mypy_cache
   | \.tox
-  | \.venv
+  | venv
   | _build
   | buck-out
   | build

setup_linting.py

@@ -88,7 +88,7 @@ def create_config_files():
   | \.hg
   | \.mypy_cache
   | \.tox
-  | \.venv
+  | venv
   | _build
   | buck-out
   | build