Skip to content

Security hardening and Adminer upgrade#580

Open
hydrospheric0 wants to merge 1 commit intoNachtzuster:mainfrom
hydrospheric0:security/adminer-5.4.2-and-command-hardening
Open

Security hardening and Adminer upgrade#580
hydrospheric0 wants to merge 1 commit intoNachtzuster:mainfrom
hydrospheric0:security/adminer-5.4.2-and-command-hardening

Conversation

@hydrospheric0
Copy link
Copy Markdown

Summary

  • upgrade bundled Adminer files to 5.4.2 (, , )
  • harden shell command construction in , , and
  • tighten path validation for delete/rename operations
  • replace deprecated with
  • make notifications resilient when is unavailable
  • fix path handling in

Validation

  • Python syntax check passed:
  • PHP CLI was not available in this environment, so PHP lint could not be executed here.

- Upgrade bundled Adminer files to 5.4.2 (adminer.php, adminer-de.php, adminer-fr.php)

- Harden shell command construction in config/play/species tools using escapeshellarg

- Tighten path validation for delete/rename flows

- Replace deprecated FILTER_SANITIZE_STRING usage with FILTER_SANITIZE_FULL_SPECIAL_CHARS

- Make notifications resilient when apprise is unavailable and use context manager for body file reads

- Fix get_wav_files path handling in helpers.py
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant