Graham McIntire
61a06fc11c
- Add firmware context module with upsert, query, and logging functions - Add FirmwareVersionFetcherWorker to fetch MikroTik RSS daily - Add Oban cron schedules (2 AM dev, 4 AM prod) - Add version change detection to Discovery module - Track firmware history with PubSub broadcasts - All tests passing Phase 3-5 of firmware tracking implementation complete. Next: LiveView UI indicators.
26 lines
1.3 KiB
Text
26 lines
1.3 KiB
Text
# Sobelow Skip Configuration
|
|
# This file documents security findings that have been reviewed and mitigated.
|
|
# See docs/security-analysis.md for detailed explanations.
|
|
|
|
# Config.HTTPS is configured in config/runtime.exs, not config/prod.exs
|
|
# Sobelow only checks prod.exs, resulting in false positive
|
|
Config.HTTPS:0:config/prod.exs
|
|
|
|
# Vendored SnmpKit library - binary_to_term used for trusted MIB compilation
|
|
# MIB files are only loaded from application-controlled directories
|
|
Misc.BinToTerm:203:lib/snmpkit/snmp_lib/mib/compiler.ex
|
|
|
|
# MIB Controller - Directory traversal mitigated with validation
|
|
# vendor_dir is constructed from validated vendor name (alphanumeric + hyphen/underscore only)
|
|
# No path traversal characters (., /, \, :) allowed
|
|
Traversal.FileModule:141:lib/towerops_web/controllers/api/v1/mib_controller.ex
|
|
|
|
# MIB Controller - File.cp with validated paths
|
|
# upload.path is Plug.Upload-controlled (safe)
|
|
# target_path uses Path.basename to strip directory components
|
|
# Filename validation rejects path traversal sequences
|
|
Traversal.FileModule:270:lib/towerops_web/controllers/api/v1/mib_controller.ex
|
|
|
|
# SQL Query - False positive, uses parameterized queries
|
|
# Table names are constants, user input uses $1, $2 binding
|
|
Traversal.FileModule:166:lib/towerops_web/controllers/api/v1/mib_controller.ex
|