maziggy 4b3b615a2c Fix Bandit B314: Replace xml.etree with defusedxml ...

Security scan (Bandit) identified vulnerable XML parsing in 3MF file
processing. The standard xml.etree.ElementTree is vulnerable to XXE
(XML External Entity) attacks.

Changes:
- Add defusedxml>=0.7.0 to requirements.txt
- Replace all xml.etree.ElementTree imports with defusedxml.ElementTree
  in production code (6 files)

Affected files:
- backend/app/services/archive.py
- backend/app/services/print_scheduler.py
- backend/app/api/routes/print_queue.py
- backend/app/api/routes/library.py
- backend/app/api/routes/printers.py
- backend/app/api/routes/archives.py

Test files intentionally left unchanged (test XML is trusted).

2026-02-05 17:30:14 +01:00

..

routes

Fix Bandit B314: Replace xml.etree with defusedxml

2026-02-05 17:30:14 +01:00

__init__.py

Added screenshots

2025-11-28 10:23:59 +01:00