Viktor Petersson 1670fadb05 fix(codeql): also suppress py/full-server-side-request-forgery ...

The same alert appeared on anthias_common.utils.url_fails after the
prior two queries were filtered. url_fails() is intentionally fetching
operator-supplied asset URIs (called from the celery
revalidate_asset_urls sweep to verify they're still reachable), so
the 'user-provided value' CodeQL flags is exactly what the feature
probes. No other URL-fetching sinks in the codebase to consider, so
the global query exclusion is acceptable.

2026-05-03 19:58:36 +00:00

..

codeql-config.yml

fix(codeql): also suppress py/full-server-side-request-forgery

2026-05-03 19:58:36 +00:00