maziggy 4b3b615a2c Fix Bandit B314: Replace xml.etree with defusedxml ...

Security scan (Bandit) identified vulnerable XML parsing in 3MF file
processing. The standard xml.etree.ElementTree is vulnerable to XXE
(XML External Entity) attacks.

Changes:
- Add defusedxml>=0.7.0 to requirements.txt
- Replace all xml.etree.ElementTree imports with defusedxml.ElementTree
  in production code (6 files)

Affected files:
- backend/app/services/archive.py
- backend/app/services/print_scheduler.py
- backend/app/api/routes/print_queue.py
- backend/app/api/routes/library.py
- backend/app/api/routes/printers.py
- backend/app/api/routes/archives.py

Test files intentionally left unchanged (test XML is trusted).

2026-02-05 17:30:14 +01:00

..

virtual_printer

Fix Python 3.10 compatibility (Issue #269)

2026-02-05 07:46:22 +01:00

__init__.py

Added screenshots

2025-11-28 10:23:59 +01:00

archive_comparison.py

- Add interactive API Browser to Settings > API Keys

2026-01-02 15:00:21 +01:00

archive.py

Fix Bandit B314: Replace xml.etree with defusedxml

2026-02-05 17:30:14 +01:00

bambu_cloud.py

Add TOTP authenticator support for Bambu Cloud login (fixes #182)

2026-02-03 09:12:31 +01:00

bambu_ftp.py

Fix A1 FTP uploads by replacing storbinary with manual transfer

2026-02-05 17:06:15 +01:00

bambu_mqtt.py

Fix H2D print commands and HMS notification issues

2026-02-05 07:26:30 +01:00

camera.py

Add camera image attachments to Pushover notifications

2026-02-04 09:21:59 -05:00

discovery.py

Excluded virtual printer from printer discovery

2026-01-05 07:52:39 +01:00

export.py

- Add print quantity tracking for project progress

2026-01-02 10:24:31 +01:00

external_camera.py

Break SSRF taint chain by reconstructing URLs from validated components

2026-01-31 16:53:37 +01:00

failure_analysis.py

Issue 1: Aborted prints showing "Unknown" in failure analysis

2025-12-15 08:50:17 +01:00

firmware_check.py

Add H2D Pro printer model support

2026-01-30 15:38:52 +01:00

firmware_update.py

Fixed ruff errors

2026-02-04 14:47:15 +01:00

github_backup.py

Fix Python 3.10 compatibility (Issue #269)

2026-02-05 07:46:22 +01:00

hms_errors.py

Add HMS error notifications with translations and plate detection fixes

2026-01-27 08:48:57 +01:00

homeassistant.py

Add script automation and visibility options (#176)

2026-01-30 09:46:03 +01:00

layer_timelapse.py

Add external network camera support for printers

2026-01-24 09:58:45 +01:00

mqtt_relay.py

Add MQTT smart plug support for energy monitoring (Issue #173)

2026-01-30 08:31:12 +01:00

mqtt_smart_plug.py

Make MQTT JSON path optional for smart plug monitoring (#173)

2026-01-30 17:18:22 +01:00

network_utils.py

Virtual Printer Proxy Mode Improvements

2026-02-04 12:29:20 +01:00

notification_service.py

Add camera image attachments to Pushover notifications

2026-02-04 09:21:59 -05:00

plate_detection.py

Fix CodeQL security warnings

2026-01-31 16:45:13 +01:00

print_scheduler.py

Fix Bandit B314: Replace xml.etree with defusedxml

2026-02-05 17:30:14 +01:00

printer_manager.py

Fix P2S printer support - disable vibration_cali and fix FTP SSL

2026-02-02 14:09:40 +01:00

smart_plug_manager.py

Merge branch '0.1.6-final' into feature/176

2026-01-31 14:43:45 +01:00

spoolman.py

Fix Python 3.10 compatibility (Issue #269)

2026-02-05 07:46:22 +01:00

stl_thumbnail.py

feat: Add STL thumbnail generation functionality

2026-01-30 09:37:30 -05:00

tasmota.py

- Add interactive API Browser to Settings > API Keys

2026-01-02 15:00:21 +01:00

timelapse_processor.py

- Add timelapse editor with trim, speed adjustment, and music overlay

2025-12-28 13:06:30 +01:00