Hermes
516397dd96
security: Fix command injection vulnerability in updater.py
...
- Add shlex.quote() on all path arguments before subprocess calls (lines 404-407)
- Consolidate duplicated version_compare() function into single module-level utility
- Remove three identical class methods from UpdateCheckThread, LocalPendingUpdateCheckThread, and UpdateManager
- Add comprehensive test suite for updater.py security-critical functionality
- Add requirements-dev.txt with pytest dependency
Addresses critical security findings from flares_audit_report.md:
S001: Command Injection in Updater (CVSS ~7.5)
Q001: Duplicated version_compare logic
T001: Insufficient test coverage for updater.py
2026-11-07 15:14:32 -07:00
tyler
2e9820336d
release 1.8.1
2026-10-30 23:28:59 -07:00
tyler
a2456daca7
improvements for notifications and prepare for release
2026-10-24 17:42:54 -07:00
tyler
d1c9346e57
changelog
2026-10-14 20:18:48 -07:00
tyler
63785d3a55
Merge branch 'main' of https://git.research.dezeeuw.ca/tyler/flares
2026-10-14 20:18:45 -07:00
tyler
3a8ffbdf70
mainly whitespace, but also some generic qol improvements
2026-10-14 20:17:23 -07:00
tyler
4059a3ef93
v2
2026-09-10 13:56:07 -07:00
tyler
66242c1a5c
changelog for hotfix
2026-09-10 13:55:58 -07:00
tyler
2a5e3f5606
fix plugins on macOS
2026-09-10 13:32:46 -07:00
tyler
613d2b9103
drag+drop support
2026-09-10 11:18:00 -07:00
tyler
cd0b55df34
roi from user provided file
2026-09-09 16:26:14 -07:00
tyler
5d46d3b3e1
pylance fixes and terminal plugin launching
2026-09-01 21:09:45 -07:00
tyler
05dc9203ba
bug fixes
2026-09-01 20:42:16 -07:00
tyler
4d00ef86e4
package dependency updates
2026-09-01 18:02:31 -07:00
tyler
e9ef78c872
continuation of plugin support
2026-09-01 17:20:16 -07:00
tyler
ca203fcb56
start of plugin support?
2026-09-01 02:14:47 -07:00
tyler
815f342ead
fix to update part 2
2026-09-01 01:11:44 -07:00
tyler
57492a479b
Merge branch 'main' of https://git.research.dezeeuw.ca/tyler/flares
2026-08-31 23:37:28 -07:00
tyler
8ef352add3
fix to app not updating
2026-08-31 23:37:12 -07:00
tyler
c566527f48
Update LICENSE
2026-08-31 22:44:42 -07:00
tyler
2fe6f42c48
actual final fixes for new version
2026-08-31 22:30:24 -07:00
tyler
71b6280cc2
fix to changelog
2026-08-31 22:06:05 -07:00
tyler
f0b8266cf9
prepare for new version
2026-08-31 22:00:35 -07:00
tyler
a9ea0efcb4
dark mode toggle + enhancements
2026-08-27 17:50:23 -07:00
tyler
83ab73a05a
heart rate improvements
2026-08-25 14:04:41 -07:00
tyler
2fa3188296
improved heart rate calculations
2026-08-24 16:40:02 -07:00
tyler
d9d5b6d940
typos and pylance
2026-08-23 00:12:22 -07:00
tyler
e37275a1bb
functional connectivity, pylance, and other improvements
2026-08-22 23:38:13 -07:00
tyler
19bd3f1279
pylance things
2026-08-21 00:57:15 -07:00
tyler
7a438b1798
unit testing and others
2026-08-21 00:12:29 -07:00
tyler
2f76622e52
file association fixes macOS
2026-08-13 14:34:51 -07:00
tyler
d2a595d0d0
release for 1.6.0
2026-08-10 18:00:22 -07:00
tyler
1e7fca49f2
fixes before release
2026-08-10 16:47:32 -07:00
tyler
074a0681b9
typos, standardization, and file association for project extensions
2026-08-06 02:00:36 -07:00
tyler
68e34484ee
late and too many typos to ignore
2026-08-03 22:39:57 -07:00
tyler
a0199737f5
improved project saving capabilities
2026-08-03 22:34:41 -07:00
tyler
0b52d2b0bc
more metadata
2026-08-03 00:46:18 -07:00
tyler
7c456e31e7
fix to stats when no json file is defined
2026-08-03 00:01:21 -07:00
tyler
61a9ea2f34
fix rare bug
2026-08-01 19:20:49 -07:00
tyler
defd4ec1c8
1.5.2 time
2026-07-31 01:17:29 -07:00
tyler
3e0d83ca9b
implement the new preferences in the backend
2026-07-30 16:15:33 -07:00
tyler
ebd13927e2
new preferences and bug fixes
2026-07-30 14:18:26 -07:00
tyler
f15a5d9433
improvements for 1.5.2
2026-07-29 17:20:23 -07:00
tyler
8b017005c5
pylance standardization
2026-07-21 00:54:51 -07:00
tyler
2b019c1bc0
preparation for 1.5.1
2026-07-17 23:59:42 -07:00
tyler
0680718398
unhardcoding and general cleanup
2026-07-17 00:07:56 -07:00
tyler
2ff7cda93a
more stats
2026-07-15 22:45:07 -07:00
tyler
d300dfb7f7
continuation of the rewrite
2026-07-15 21:43:22 -07:00
tyler
12afc5d3bc
small rewrite to impose dry principles
2026-07-15 21:21:35 -07:00
tyler
ffa14693b3
start to figure out stats
2026-07-15 16:24:13 -07:00
Hermes
tyler