Kevin Veen-Birkenbach 330881260c fix(i18n): build catalogue paths from the language table, not the request ...

catalog() joined the requested language code straight into the UI and
content catalogue paths, and read_catalog logged those paths. Both the
negotiated Accept-Language code and the /<lang>/ route only ever pass
supported codes, but that guarantee lived in the callers, so CodeQL
reported path injection and log injection on the request value.

catalog() now resolves the code through a table of the supported
languages and builds the file names from the table's value, so an
unsupported code returns an empty catalogue and never becomes a path.
A unit test holds "../content/de" to that without reading any file,
and the translate_tree fixture moves from the made-up code "xx" to "de"
because unsupported codes now translate to English by design.

Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>

2026-09-10 17:35:07 +02:00

..

__init__.py

feat: migrate to pyproject.toml, add test suites, split CI workflows

2026-03-29 23:03:09 +02:00

asset_resolver.py

feat(assets): probe-first resolver + SPOT for IMAGE_NAME/PORT + README screenshot

2026-05-18 12:19:15 +02:00

cache_manager.py

feat: migrate to pyproject.toml, add test suites, split CI workflows

2026-03-29 23:03:09 +02:00

compute_card_classes.py

feat: migrate to pyproject.toml, add test suites, split CI workflows

2026-03-29 23:03:09 +02:00

configuration_resolver.py

feat: migrate to pyproject.toml, add test suites, split CI workflows

2026-03-29 23:03:09 +02:00

i18n.py

fix(i18n): build catalogue paths from the language table, not the request

2026-09-10 17:35:07 +02:00

languages.py

feat(i18n): offer every ISO 639-1 language

2026-08-22 01:18:30 +02:00