maziggy 598cc699d4 Add CodeQL query suites for zero-finding scans and fix remaining security issues ...

- Create .codeql/python-bambuddy.qls excluding 14 accepted-risk rule
  categories (all reviewed and documented with justifications)
- Create .codeql/javascript-bambuddy.qls excluding false-positive
  XSS findings (generated coverage file + blob URL in audio src)
- Fix stack trace exposure in updates.py: replace str(e) with generic
  error messages in HTTP responses (2 locations)
- Fix SSRF in homeassistant.py: add _validate_url() with scheme
  validation and metadata-service blocking
- Fix SSRF in tasmota.py: add _validate_ip() blocking loopback and
  link-local addresses
- Add --threads=0 to all CodeQL CLI commands in test_security.sh for
  parallel query evaluation (67s → 43s wall clock)

2026-02-06 12:51:17 +01:00

..

__init__.py

Added screenshots

2025-11-28 10:23:59 +01:00

ams_history.py

Add authentication to 200+ API endpoints (CVE-2026-25505)

2026-02-03 09:13:00 +01:00

api_keys.py

Add authentication to 200+ API endpoints (CVE-2026-25505)

2026-02-03 09:13:00 +01:00

archives.py

Remove unused imports, variables, and fix minor CodeQL findings

2026-02-06 12:19:17 +01:00

auth.py

Fix trivial conditionals, commented-out code, and dead variables (CodeQL)

2026-02-06 12:32:29 +01:00

camera.py

Add explanatory comments to 265 empty except blocks

2026-02-06 11:58:38 +01:00

cloud.py

Fix safe security findings: hashlib, log injection, broad excepts

2026-02-06 11:37:59 +01:00

discovery.py

Add authentication to 200+ API endpoints (CVE-2026-25505)

2026-02-03 09:13:00 +01:00

external_links.py

Fix safe security findings: hashlib, log injection, broad excepts

2026-02-06 11:37:59 +01:00

filaments.py

Add authentication to 200+ API endpoints (CVE-2026-25505)

2026-02-03 09:13:00 +01:00

firmware.py

Add authentication to 200+ API endpoints (CVE-2026-25505)

2026-02-03 09:13:00 +01:00

github_backup.py

Fix safe security findings: hashlib, log injection, broad excepts

2026-02-06 11:37:59 +01:00

groups.py

Add group-based permissions system with granular access control

2026-01-31 12:50:15 +01:00

kprofiles.py

Fix safe security findings: hashlib, log injection, broad excepts

2026-02-06 11:37:59 +01:00

library.py

Remove 30 redundant function-level imports

2026-02-06 12:06:51 +01:00

maintenance.py

Fix safe security findings: hashlib, log injection, broad excepts

2026-02-06 11:37:59 +01:00

metrics.py

Fix filament calculation incorrectly multiplied by quantity

2026-02-04 07:20:17 +01:00

notification_templates.py

Add authentication to 200+ API endpoints (CVE-2026-25505)

2026-02-03 09:13:00 +01:00

notifications.py

Fix safe security findings: hashlib, log injection, broad excepts

2026-02-06 11:37:59 +01:00

pending_uploads.py

Add explanatory comments to 265 empty except blocks

2026-02-06 11:58:38 +01:00

print_queue.py

Add explanatory comments to 265 empty except blocks

2026-02-06 11:58:38 +01:00

printers.py

Remove 30 redundant function-level imports

2026-02-06 12:06:51 +01:00

projects.py

Fix safe security findings: hashlib, log injection, broad excepts

2026-02-06 11:37:59 +01:00

settings.py

Fix safe security findings: hashlib, log injection, broad excepts

2026-02-06 11:37:59 +01:00

smart_plugs.py

Fix safe security findings: hashlib, log injection, broad excepts

2026-02-06 11:37:59 +01:00

spoolman.py

Fix safe security findings: hashlib, log injection, broad excepts

2026-02-06 11:37:59 +01:00

support.py

Fix unused globals and redundant JS conditions (CodeQL)

2026-02-06 12:26:38 +01:00

system.py

Add explanatory comments to 265 empty except blocks

2026-02-06 11:58:38 +01:00

updates.py

Add CodeQL query suites for zero-finding scans and fix remaining security issues

2026-02-06 12:51:17 +01:00

users.py

Implement ownership-based permissions (Issue #205)

2026-02-01 11:29:17 +01:00

webhook.py

Fix safe security findings: hashlib, log injection, broad excepts

2026-02-06 11:37:59 +01:00

websocket.py

Fix safe security findings: hashlib, log injection, broad excepts

2026-02-06 11:37:59 +01:00