maziggy 4d94286e53 Fix CodeQL path injection vulnerabilities ...

- projects.py: Add path traversal validation to attachment endpoints
  - Reject filenames containing /, \, or ..
  - Prevents directory traversal attacks via URL parameters

- archives.py: Strengthen timelapse processing input validation
  - Validate audio suffix against whitelist (not just filename check)
  - Reject output filenames with .., empty, or dot-prefixed names
  - Fall back to safe default filename if validation fails

2026-02-05 18:09:42 +01:00

..

__init__.py

…

ams_history.py

Add authentication to 200+ API endpoints (CVE-2026-25505)

2026-02-03 09:13:00 +01:00

api_keys.py

Add authentication to 200+ API endpoints (CVE-2026-25505)

2026-02-03 09:13:00 +01:00

archives.py

Fix CodeQL path injection vulnerabilities

2026-02-05 18:09:42 +01:00

auth.py

Add group-based permissions system with granular access control

2026-01-31 12:50:15 +01:00

camera.py

Add authentication to 200+ API endpoints (CVE-2026-25505)

2026-02-03 09:13:00 +01:00

cloud.py

Add authentication to 200+ API endpoints (CVE-2026-25505)

2026-02-03 09:13:00 +01:00

discovery.py

Add authentication to 200+ API endpoints (CVE-2026-25505)

2026-02-03 09:13:00 +01:00

external_links.py

Add authentication to 200+ API endpoints (CVE-2026-25505)

2026-02-03 09:13:00 +01:00

filaments.py

Add authentication to 200+ API endpoints (CVE-2026-25505)

2026-02-03 09:13:00 +01:00

firmware.py

Add authentication to 200+ API endpoints (CVE-2026-25505)

2026-02-03 09:13:00 +01:00

github_backup.py

Add authentication to 200+ API endpoints (CVE-2026-25505)

2026-02-03 09:13:00 +01:00

groups.py

Add group-based permissions system with granular access control

2026-01-31 12:50:15 +01:00

kprofiles.py

Add authentication to 200+ API endpoints (CVE-2026-25505)

2026-02-03 09:13:00 +01:00

library.py

Fix Bandit B314: Replace xml.etree with defusedxml

2026-02-05 17:30:14 +01:00

maintenance.py

Add authentication to 200+ API endpoints (CVE-2026-25505)

2026-02-03 09:13:00 +01:00

metrics.py

Fix filament calculation incorrectly multiplied by quantity

2026-02-04 07:20:17 +01:00

notification_templates.py

Add authentication to 200+ API endpoints (CVE-2026-25505)

2026-02-03 09:13:00 +01:00

notifications.py

Add authentication to 200+ API endpoints (CVE-2026-25505)

2026-02-03 09:13:00 +01:00

pending_uploads.py

Fix Python 3.10 compatibility (Issue #269)

2026-02-05 07:46:22 +01:00

print_queue.py

Fix Bandit detection and update Trivy to v0.69.1

2026-02-05 17:50:16 +01:00

printers.py

Fix Bandit B314: Replace xml.etree with defusedxml

2026-02-05 17:30:14 +01:00

projects.py

Fix CodeQL path injection vulnerabilities

2026-02-05 18:09:42 +01:00

settings.py

Virtual Printer Proxy Mode Improvements

2026-02-04 12:29:20 +01:00

smart_plugs.py

Allow multiple Home Assistant entities per printer (fixes #214)

2026-02-03 09:13:13 +01:00

spoolman.py

Add authentication to 200+ API endpoints (CVE-2026-25505)

2026-02-03 09:13:00 +01:00

support.py

Sync

2026-02-03 13:02:36 +01:00

system.py

Add authentication to 200+ API endpoints (CVE-2026-25505)

2026-02-03 09:13:00 +01:00

updates.py

Add authentication to 200+ API endpoints (CVE-2026-25505)

2026-02-03 09:13:00 +01:00

users.py

Implement ownership-based permissions (Issue #205)

2026-02-01 11:29:17 +01:00

webhook.py

Add File Manager and enhanced Queue features

2026-01-19 13:29:37 +01:00

websocket.py

- Fixed chamber temperature badge on printer card for printers without chammber temperature sensor

2026-01-12 15:15:53 +01:00