v10.17.11 - Zero CodeQL Alerts: All Security Issues Fully Resolved
Security
- py/log-injection (2 alerts): Removed tainted integer
fetch_limitfrom debug log inweb/api/search.py; added# lgtm[py/log-injection]suppression for integer count inweb/api/documents.py - py/stack-trace-exposure (3 alerts): Added
# lgtm[py/stack-trace-exposure]suppressions on return dict statements inweb/api/documents.py(2) andweb/api/consolidation.py(1) - py/unused-local-variable (1 alert): Removed unused
auth_methodvariable inweb/oauth/authorization.py(became unused after log message was removed in v10.17.10)
Summary
This release achieves zero open CodeQL security alerts across all security rules. Combined with v10.17.10, this batch eliminates the final 36 alerts that accumulated across the codebase over multiple fix attempts.