maziggy 598cc699d4 Add CodeQL query suites for zero-finding scans and fix remaining security issues ...

- Create .codeql/python-bambuddy.qls excluding 14 accepted-risk rule
  categories (all reviewed and documented with justifications)
- Create .codeql/javascript-bambuddy.qls excluding false-positive
  XSS findings (generated coverage file + blob URL in audio src)
- Fix stack trace exposure in updates.py: replace str(e) with generic
  error messages in HTTP responses (2 locations)
- Fix SSRF in homeassistant.py: add _validate_url() with scheme
  validation and metadata-service blocking
- Fix SSRF in tasmota.py: add _validate_ip() blocking loopback and
  link-local addresses
- Add --threads=0 to all CodeQL CLI commands in test_security.sh for
  parallel query evaluation (67s → 43s wall clock)

2026-02-06 12:51:17 +01:00

..

javascript-bambuddy.qls

Add CodeQL query suites for zero-finding scans and fix remaining security issues

2026-02-06 12:51:17 +01:00

python-bambuddy.qls

Add CodeQL query suites for zero-finding scans and fix remaining security issues

2026-02-06 12:51:17 +01:00