5 Commits

Include renames

Author	SHA1	Message	Date
k3nnyandClaude	6c68b5339e	fix(security): replace os.popen/os.system with subprocess for command injection prevention ... Replace all deprecated and unsafe command execution methods with secure subprocess.run() calls using list arguments. Changes: - Replace os.popen() with subprocess.run() in tisbackup_gui.py - Replace os.system() with subprocess.run() in tasks.py and backup_xva.py - Add input validation for device/partition names (regex-based) - Fix file operations to use context managers (with statement) - Remove wildcard import from shutil - Add timeout protection to all subprocess calls (5-30s) - Improve error handling with proper try/except blocks Security improvements: - Prevent command injection vulnerabilities in USB disk operations - Validate device paths with regex before system calls - Use list arguments instead of shell=True to prevent injection - Add proper error handling instead of silent failures Code quality improvements: - Replace deprecated os.popen() (deprecated since Python 2.6) - Use context managers for file operations - Remove wildcard imports for cleaner namespace - Add comprehensive error handling and logging Documentation: - Add SECURITY_IMPROVEMENTS.md documenting all changes - Document remaining security issues and recommendations - Include testing recommendations and migration notes BREAKING CHANGE: None - all changes are backward compatible 🤖 Generated with [Claude Code](https://claude.com/claude-code) Co-Authored-By: Claude <noreply@anthropic.com>	2025-10-05 01:23:53 +02:00
k3nny	737f9bea38	fix iniparse ... fix code passing ruff linter pre-commit ruff pre-commit ruff format	2024-11-29 23:45:40 +01:00
k3nny	ffd9bf3d39	fix first pass	2024-11-28 23:20:19 +01:00
htouvet	bc4b9811ed	migrate to Python3 (from alejeune)	2022-04-25 10:02:43 +02:00
ssamson-tis	9a561e66bb	Fix bugs with huey	2015-07-08 16:02:14 +02:00