Block a user
[Security audit] Centralize safe HTTP(S) fetch and URL validation in core
[Security audit] Centralize safe HTTP(S) fetch and URL validation in core
Codex State: done
Summary
- Added shared validated HTTP(S) fetch helper under govoplan_core.security.http_fetch.
- Moved module package catalog, module license, configuration package…
[Task] Add pagination and windowing for large address and calendar views
[Debt] Add safe auth principal caching with explicit invalidation
[Debt] Add DB query timing and batch auth principal resolution
[Debt] Optimize dev-server reload behavior with many enabled modules
[Task] Split auth session check from full user bootstrap
[Security audit] Replace silent core exception handling with narrow logging
[Security audit] Replace silent core exception handling with narrow logging
Codex State: done
Summary
- Replaced core silent best-effort exception handling with narrow exceptions, explicit fallback returns, or debug logging.
Changed Files
- `src/govoplan_cor…
[Security audit] Replace silent IMAP/SMTP exception handling with narrow logging
[Security audit] Replace silent IMAP/SMTP exception handling with narrow logging
Codex State: done
Summary
- Replaced silent SMTP/IMAP cleanup exception handlers with debug logging that avoids credentials and message content.
Changed Files
- `src/govoplan_mail/ba…
[Security audit] Replace production asserts with explicit campaign errors
[Security audit] Replace production asserts with explicit campaign errors
Codex State: done
Summary
- Replaced production asserts in campaign version persistence, execution snapshots, and send job reload paths with explicit domain errors.
Changed Files
-…
[Security audit] Harden CalDAV/WebCal remote fetch and XML parsing
[Security audit] Harden CalDAV/WebCal remote fetch and XML parsing
Codex State: done
Summary
- Removed remaining stdlib XML imports from calendar backend parsing paths; parsing continues through defusedxml SafeElementTree.
- Added narrow Bandit B310…
[Security audit] Split production and test scanner profiles to reduce false positives
Codex State: done
Summary
- Split Bandit/Ruff security reports into production-gating src reports and separate non-gating test reports.
- Kept production security checks strict while…
[Security audit] Split production and test scanner profiles to reduce false positives
[Security audit] Document safe SQLAlchemy text usage in migration helpers
Codex State: done
Summary
- Added narrow B608 suppressions to validated, dialect-quoted migration helper SQL construction.
Changed Files
src/govoplan_core/db/migrations.py
###…
[Security audit] Document safe SQLAlchemy text usage in migration helpers
[Audit] Refactor vCard parsing and serialization complexity hotspots