Skip to content

Fix CodeQL incomplete URL substring sanitization alert #15

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
m4r1k merged 4 commits into from
Apr 11, 2026
Merged

Fix CodeQL incomplete URL substring sanitization alert #15

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
4 commits
Select commit Hold shift + click to select a range
048c61f
fix: resolve CodeQL incomplete URL substring sanitization alert
m4r1k Apr 11, 2026
3c83883
Merge branch 'main' into fix/codeql-url-substring
m4r1k Apr 11, 2026
38de2f9
ci: add Debian 12 and Ubuntu 24.04 to pip-in-container tests
m4r1k Apr 11, 2026
a5bd3a5
chore: bump version to 5.1.0-rc0
m4r1k Apr 11, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
6 changes: 6 additions & 0 deletions .github/workflows/integration.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -208,13 +208,19 @@ jobs:
- distro: debian
version: '11'
name: Debian 11
- distro: debian
version: '12'
name: Debian 12
- distro: debian
version: '13'
name: Debian 13
# Ubuntu 22.04 skipped: system pip 22.0.2 has a regression with
# pyproject.toml dynamic version metadata, building UNKNOWN-0.0.0.
# Upgrading pip fixes it, but that no longer tests the real system.
# Ubuntu 22.04 is covered by the test-deb job instead.
- distro: ubuntu
version: '24.04'
name: Ubuntu 24.04
- distro: ubuntu
version: '26.04'
name: Ubuntu 26.04
Expand Down
2 changes: 1 addition & 1 deletion src/eneru/version.py
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -2,4 +2,4 @@

# Version is set at build time via git describe --tags
# Format: "4.3.0" for tagged releases, "4.3.0-5-gabcdef1" for dev builds
__version__ = "5.0.0-rc4"
__version__ = "5.1.0-rc0"
3 changes: 1 addition & 2 deletions tests/test_config.py
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -227,8 +227,7 @@ def test_append_avatar_to_discord(self):
avatar = "https://example.com/avatar.png"
result = ConfigLoader._append_avatar_to_url(TEST_DISCORD_APPRISE_URL, avatar)

assert "avatar_url=" in result
assert "example.com" in result
assert "avatar_url=https%3A%2F%2Fexample.com%2Favatar.png" in result

@pytest.mark.unit
def test_append_avatar_to_slack(self):
Expand Down
Loading