Skip to content

Validate city names before loading route data - #24

Merged
quinnarnold merged 1 commit into
mainfrom
security/codeql-city-validation
Jul 30, 2026
Merged

Validate city names before loading route data#24
quinnarnold merged 1 commit into
mainfrom
security/codeql-city-validation

Conversation

@quinnarnold

Copy link
Copy Markdown
Owner

Summary

  • restrict Python route requests to the six supported cities
  • map validated city names to fixed data directories before loading pickle/joblib artifacts
  • add negative tests for unsupported and traversal-style city names

Validation

  • ruff check .
  • pytest tests/ -q (39 passed)

This addresses the CodeQL path/deserialization findings without changing the documented trusted-artifact requirement.

@quinnarnold
quinnarnold merged commit fb7be27 into main Jul 30, 2026
16 checks passed
@quinnarnold
quinnarnold deleted the security/codeql-city-validation branch July 30, 2026 14:30
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant