Pouzor 2d376c2bed fix: harden media path handling against path injection (CodeQL py/path-injection) ...

Resolve media filenames through a shared _resolve_media_path() barrier that
confirms the resolved path sits directly under the resolved media dir, so
CodeQL can trace the sanitization the regex already guaranteed.

ha-relevant: no

2026-07-07 11:50:12 +02:00

..

__init__.py

fix: all lint errors, test + lint pre-commit passing

2026-03-06 23:58:10 +01:00

conftest.py

chore(security): drop passlib for direct bcrypt + reject CLI-flag check targets

2026-05-14 12:11:40 +02:00

test_auth.py

chore(security): drop passlib for direct bcrypt + reject CLI-flag check targets

2026-05-14 12:11:40 +02:00

test_canvas.py

feat: configurable edge line style + width per type and per edge

2026-07-05 14:11:01 +02:00

test_db_backup.py

feat: automatic DB backup before migrations using VERSION file

2026-04-19 22:09:43 +02:00

test_designs.py

feat: manage canvases with custom name and icon

2026-06-02 15:47:57 +02:00

test_edges.py

feat: configurable edge line style + width per type and per edge

2026-07-05 14:11:01 +02:00

test_fingerprint.py

feat: add tiered service matching with http_regex and port-agnostic signatures

2026-06-23 12:25:10 +02:00

test_http_probe.py

feat: add async HTTP prober for deep-scan service identification

2026-06-23 13:41:32 +02:00

test_integration.py

fix(tests): correct integration test API shapes and test isolation

2026-03-28 12:36:28 +01:00

test_liveview.py

feat(liveview): header View link opens active design as read-only canvas

2026-06-04 14:10:29 +02:00

test_mac_utils.py

feat: merge IP-scanned and Proxmox-imported devices by MAC

2026-07-06 20:11:03 +02:00

test_media.py

fix: harden media path handling against path injection (CodeQL py/path-injection)

2026-07-07 11:50:12 +02:00

test_migrations.py

feat: surface inventory timestamps on nodes

2026-06-27 03:13:49 +02:00

test_mqtt_common.py

feat: add Z-Wave network scan via MQTT gateway

2026-06-26 11:19:37 +02:00

test_node_dedupe.py

fix: tolerate same device on multiple canvases in zigbee/zwave import

2026-07-03 01:52:56 +02:00

test_nodes.py

fix: attach MCP-created nodes/edges to a design (#225)

2026-06-28 14:00:59 +02:00

test_properties_migration.py

feat: replace static hardware fields with dynamic node properties

2026-04-09 13:47:36 +02:00

test_proxmox_router.py

fix: keep mesh/cluster links so edges resolve onto a second canvas

2026-07-07 10:32:47 +02:00

test_proxmox_service.py

feat: merge IP-scanned and Proxmox-imported devices by MAC

2026-07-06 20:11:03 +02:00

test_scan.py

fix: keep mesh/cluster links so edges resolve onto a second canvas

2026-07-07 10:32:47 +02:00

test_scanner.py

feat: merge IP-scanned and Proxmox-imported devices by MAC

2026-07-06 20:11:03 +02:00

test_scheduler.py

feat: import hosts/VMs/LXC from Proxmox VE with optional auto-sync

2026-07-05 18:58:12 +02:00

test_settings.py

feat: per-service status checks with offline colouring

2026-06-10 02:22:48 +02:00

test_signatures_data.py

feat: seed port-agnostic http_regex signatures for ~50 popular homelab apps

2026-06-25 14:47:58 +02:00

test_stats.py

feat(api): stats endpoint for gethomepage widget (closes #131)

2026-05-14 18:11:43 +02:00

test_status_checker.py

fix(status): keep non-HTTP services grey instead of red

2026-06-10 10:48:03 +02:00

test_status.py

fix(ws): idempotent connection removal, release slot on any error

2026-06-10 09:58:06 +02:00

test_zigbee_router.py

fix: backfill inventory row for on-canvas mesh devices missing one

2026-07-03 12:08:53 +02:00

test_zigbee_service.py

fix(zigbee): strict tree edges + auto-select imported nodes

2026-05-06 23:53:31 +02:00

test_zwave_router.py

fix: backfill inventory row for on-canvas mesh devices missing one

2026-07-03 12:08:53 +02:00

test_zwave_service.py

feat: add Z-Wave network scan via MQTT gateway

2026-06-26 11:19:37 +02:00