maziggy a0133fb43b Fix safe security findings: hashlib, log injection, broad excepts, bandit suppressions ...

- Add usedforsecurity=False to MD5 (AMS fingerprint) and SHA1 (git blob
  hash) calls to silence Bandit B303 / CodeQL weak-crypto findings
- Convert ~996 f-string logging calls to parameterized %s-style across
  55 files to prevent log injection (Bandit G201 / CodeQL log-injection)
- Narrow ~199 broad except Exception blocks to specific types:
  OperationalError for DB migrations, OSError for network/file cleanup,
  (OSError, ftplib.error_reply) for FTP, and targeted tuples for
  ZIP/XML/JSON parsing — 36 intentionally left broad (mixed async,
  re-raise patterns)
- Add # nosec comments to 9 known-safe lines (0.0.0.0 virtual printer
  binds, ftplib imports) and exclude backend/tests/ from bandit scan
- Bandit now reports 0 medium/high findings

2026-02-06 11:45:12 +01:00

..

__init__.py

Add virtual printer model selection

2026-01-04 09:39:06 +01:00

certificate.py

Fix safe security findings: hashlib, log injection, broad excepts

2026-02-06 11:37:59 +01:00

ftp_server.py

Fix safe security findings: hashlib, log injection, broad excepts, bandit suppressions

2026-02-06 11:45:12 +01:00

manager.py

Fix safe security findings: hashlib, log injection, broad excepts

2026-02-06 11:37:59 +01:00

mqtt_server.py

Fix safe security findings: hashlib, log injection, broad excepts, bandit suppressions

2026-02-06 11:45:12 +01:00

ssdp_server.py

Fix safe security findings: hashlib, log injection, broad excepts

2026-02-06 11:37:59 +01:00

tcp_proxy.py

Fix safe security findings: hashlib, log injection, broad excepts, bandit suppressions

2026-02-06 11:45:12 +01:00