[repro] === Vulnerable commit test === [repro] Using existing repo at /data/pruva/project-cache/2ad68923-f650-4dc6-8046-dbd760ef5f0b/repo [repro] Running: /data/pruva/project-cache/2ad68923-f650-4dc6-8046-dbd760ef5f0b/venv/bin/pip show gradio [repro] gradio already installed in venv [repro] Checking out gradio at 0d670adf41a0b510f7fd745495dce1664d38f0e5 [repro] Running: git -C /data/pruva/project-cache/2ad68923-f650-4dc6-8046-dbd760ef5f0b/repo fetch origin [repro] Running: git -C /data/pruva/project-cache/2ad68923-f650-4dc6-8046-dbd760ef5f0b/repo checkout -f 0d670adf41a0b510f7fd745495dce1664d38f0e5 [repro] Running: git -C /data/pruva/project-cache/2ad68923-f650-4dc6-8046-dbd760ef5f0b/repo submodule update --init --recursive [repro] Starting Gradio server: /data/pruva/runs/82083bf0-0de5-4bb4-b3f4-1d773ebb7776/bundle/repro/app.py [repro] Server port is open [repro] API /gradio_api/info endpoint is responding [repro] Response (200): { "data": [ "PRUVA_SECRET_12345" ], "is_generating": false, "duration": 0.00022935867309570312, "average_duration": 0.00022935867309570312, "render_config": null, "changed_state_ids": [], "used_cache": null } [repro] Vulnerable commit leaked the secret file — issue reproduced. [repro] === Fixed commit test === [repro] Using existing repo at /data/pruva/project-cache/2ad68923-f650-4dc6-8046-dbd760ef5f0b/repo [repro] Running: /data/pruva/project-cache/2ad68923-f650-4dc6-8046-dbd760ef5f0b/venv/bin/pip show gradio [repro] gradio already installed in venv [repro] Checking out gradio at 97d541f3d5fd05b2587a69ecc94b68fe5d2d7004 [repro] Running: git -C /data/pruva/project-cache/2ad68923-f650-4dc6-8046-dbd760ef5f0b/repo fetch origin [repro] Running: git -C /data/pruva/project-cache/2ad68923-f650-4dc6-8046-dbd760ef5f0b/repo checkout -f 97d541f3d5fd05b2587a69ecc94b68fe5d2d7004 [repro] Running: git -C /data/pruva/project-cache/2ad68923-f650-4dc6-8046-dbd760ef5f0b/repo submodule update --init --recursive [repro] Starting Gradio server: /data/pruva/runs/82083bf0-0de5-4bb4-b3f4-1d773ebb7776/bundle/repro/app.py [repro] Server port is open [repro] API /gradio_api/info endpoint is responding [repro] Response (500): { "error": "", "visible": true }