maziggy
|
598cc699d4
|
Add CodeQL query suites for zero-finding scans and fix remaining security issues
- Create .codeql/python-bambuddy.qls excluding 14 accepted-risk rule
categories (all reviewed and documented with justifications)
- Create .codeql/javascript-bambuddy.qls excluding false-positive
XSS findings (generated coverage file + blob URL in audio src)
- Fix stack trace exposure in updates.py: replace str(e) with generic
error messages in HTTP responses (2 locations)
- Fix SSRF in homeassistant.py: add _validate_url() with scheme
validation and metadata-service blocking
- Fix SSRF in tasmota.py: add _validate_ip() blocking loopback and
link-local addresses
- Add --threads=0 to all CodeQL CLI commands in test_security.sh for
parallel query evaluation (67s → 43s wall clock)
|
2026-02-06 12:51:17 +01:00 |
|