SHAdd0WTAka / Zen-Ai-Pentest / 23115084157

5%

push

github

fix: additional CodeQL security fixes

Fix remaining Log Injection and Path Traversal alerts:

1. Log Injection (14 alerts):
   - websocket_scaling/websocket/scalable_websocket_manager.py
   - Sanitize agent_id, client_ip, node_id, scan_id, channel
   - Prevents log forging via user-controlled input

2. Path Traversal:
   - evidence/storage.py already has protection (false positive)
   - plugin_service.py already fixed in previous commit

Total fixed in this PR: ~45 CodeQL security alerts
Remaining: Pinned-Dependencies (80+), Unused imports (100+) - code quality

13 of 1234 branches covered (1.05%)

Branch coverage included in aggregate %.

599 of 11731 relevant lines covered (5.11%)

0.05 hits per line