Merge pull request #20389 from Ultimaker/CURA-12458_security-fixes-that-came-in-via-the-inbox

CURA-12458 security fixes that came in via the inbox
This commit is contained in:
HellAholic 2025-03-19 15:27:50 +01:00 committed by GitHub
commit 0bee559626
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194
2 changed files with 3 additions and 2 deletions

View File

@ -127,6 +127,7 @@ class AuthorizationRequestHandler(BaseHTTPRequestHandler):
def _sendHeaders(self, status: "ResponseStatus", content_type: str, redirect_uri: str = None) -> None:
self.send_response(status.code, status.message)
self.send_header("Content-type", content_type)
self.send_header("Strict-Transport-Security", "max-age=900")
if redirect_uri:
self.send_header("Location", redirect_uri)
self.end_headers()

View File

@ -21,7 +21,7 @@ def main() -> None:
parser.add_argument("--diagnose", action="store_true", help="Diagnose the files")
parser.add_argument("--deleted", action="store_true", help="Check for deleted files")
parser.add_argument("--fix", action="store_true", help="Attempt to apply the suggested fixes on the files")
parser.add_argument("Files", metavar="F", type=Path, nargs="+", help="Files or directories to format")
parser.add_argument("Files", type=Path, nargs="+", help="Files or directories to format")
args = parser.parse_args()
files = extractFilePaths(args.Files)
@ -39,7 +39,7 @@ def main() -> None:
return
with open(setting_path, "r") as f:
settings = yaml.load(f, yaml.FullLoader)
settings = yaml.safe_load(f)
full_body_check = {"Diagnostics": []}
comments_check = {"Error Files": []}