Albrecht Degering zemion
  • Joined on 2025-08-22
zemion opened issue GovOPlaN/govoplan-audit#6 2026-07-11 12:51:24 +02:00
[Debt] Refactor high-complexity audit listing endpoints
zemion opened issue GovOPlaN/govoplan-admin#5 2026-07-11 12:51:23 +02:00
[Debt] Refactor high-complexity admin catalog/settings route helpers
zemion opened issue GovOPlaN/govoplan-access#13 2026-07-11 12:51:23 +02:00
[Debt] Refactor high-complexity access directory/RBAC/admin flows
zemion opened issue GovOPlaN/govoplan-campaign#54 2026-07-11 12:51:21 +02:00
[Debt] Refactor high-complexity campaign validation, sending, and reporting code
zemion opened issue GovOPlaN/govoplan-campaign#53 2026-07-11 12:51:21 +02:00
[Security] Harden campaign WebUI dynamic regex and path assignment helpers
zemion opened issue GovOPlaN/govoplan-mail#12 2026-07-11 12:51:20 +02:00
[Debt] Refactor high-complexity mail profile and transport functions
zemion opened issue GovOPlaN/govoplan-mail#11 2026-07-11 12:51:20 +02:00
[Security] Review mail policy SQL text and wildcard regex audit findings
zemion opened issue GovOPlaN/govoplan-files#28 2026-07-11 12:51:19 +02:00
[Debt] Refactor high-complexity files connector and transfer flows
zemion opened issue GovOPlaN/govoplan-files#27 2026-07-11 12:51:19 +02:00
[Security] Run SMB connector dev container as non-root where feasible
zemion closed issue GovOPlaN/govoplan-files#26 2026-07-11 12:51:18 +02:00
[Security] Parse WebDAV XML with defusedxml
zemion opened issue GovOPlaN/govoplan-files#26 2026-07-11 12:51:18 +02:00
[Security] Parse WebDAV XML with defusedxml
zemion commented on issue GovOPlaN/govoplan-files#26 2026-07-11 12:51:18 +02:00
[Security] Parse WebDAV XML with defusedxml

Codex state update: Implemented locally: WebDAV multistatus parsing now uses defusedxml.ElementTree.fromstring, with defusedxml>=0.7,<1 added to pyproject.toml. Verified with py_compile and…

zemion opened issue GovOPlaN/govoplan-calendar#13 2026-07-11 12:51:17 +02:00
[Debt] Refactor high-complexity calendar sync and VEVENT code
zemion opened issue GovOPlaN/govoplan-calendar#12 2026-07-11 12:51:17 +02:00
[Security] Add explicit egress policy to calendar sync URL fetches
zemion opened issue GovOPlaN/govoplan-core#245 2026-07-11 12:51:16 +02:00
[Debt] Refactor high-complexity core installer/configuration/runtime functions
zemion closed issue GovOPlaN/govoplan-calendar#11 2026-07-11 12:51:16 +02:00
[Security] Parse CalDAV and EWS XML with defusedxml
zemion commented on issue GovOPlaN/govoplan-calendar#11 2026-07-11 12:51:16 +02:00
[Security] Parse CalDAV and EWS XML with defusedxml

Codex state update: Implemented locally: CalDAV and EWS XML parse paths now use defusedxml.ElementTree.fromstring, with defusedxml>=0.7,<1 added to pyproject.toml. Verified with py_compile…

zemion opened issue GovOPlaN/govoplan-calendar#11 2026-07-11 12:51:16 +02:00
[Security] Parse CalDAV and EWS XML with defusedxml
zemion opened issue GovOPlaN/govoplan-core#244 2026-07-11 12:51:14 +02:00
[Security] Lock audit toolbox dependencies flagged by OSV
zemion closed issue GovOPlaN/govoplan-core#243 2026-07-11 12:51:12 +02:00
[Security] Fix audit report capture and duplicate-scan noise