Block a user
[Debt] Optimize dev-server reload behavior with many enabled modules
[Security audit] Replace silent core exception handling with narrow logging
Codex State: done
Summary
- Replaced core silent best-effort exception handling with narrow exceptions, explicit fallback returns, or debug logging.
Changed Files
- `src/govoplan_cor…
[Security audit] Replace silent core exception handling with narrow logging
[Security audit] Replace silent IMAP/SMTP exception handling with narrow logging
[Security audit] Replace silent IMAP/SMTP exception handling with narrow logging
Codex State: done
Summary
- Replaced silent SMTP/IMAP cleanup exception handlers with debug logging that avoids credentials and message content.
Changed Files
- `src/govoplan_mail/ba…
[Security audit] Replace production asserts with explicit campaign errors
[Security audit] Replace production asserts with explicit campaign errors
Codex State: done
Summary
- Replaced production asserts in campaign version persistence, execution snapshots, and send job reload paths with explicit domain errors.
Changed Files
-…
[Security audit] Harden CalDAV/WebCal remote fetch and XML parsing
Codex State: done
Summary
- Removed remaining stdlib XML imports from calendar backend parsing paths; parsing continues through defusedxml SafeElementTree.
- Added narrow Bandit B310…
[Security audit] Harden CalDAV/WebCal remote fetch and XML parsing
[Security audit] Split production and test scanner profiles to reduce false positives
[Security audit] Split production and test scanner profiles to reduce false positives
Codex State: done
Summary
- Split Bandit/Ruff security reports into production-gating src reports and separate non-gating test reports.
- Kept production security checks strict while…
[Security audit] Document safe SQLAlchemy text usage in migration helpers
Codex State: done
Summary
- Added narrow B608 suppressions to validated, dialect-quoted migration helper SQL construction.
Changed Files
src/govoplan_core/db/migrations.py
###…
[Security audit] Document safe SQLAlchemy text usage in migration helpers
[Audit] Refactor vCard parsing and serialization complexity hotspots
[Security audit] Replace silent IMAP/SMTP exception handling with narrow logging
[Audit] Refactor files transfer and campaign-usage complexity hotspots
[Audit] Refactor campaign validation, persistence, and sending complexity hotspots
[Security audit] Replace production asserts with explicit campaign errors
[Audit] Refactor CalDAV and iCalendar parsing complexity hotspots
[Security audit] Harden CalDAV/WebCal remote fetch and XML parsing