pyblock/pybitblock/SPV
GaltRanch 6304b7a42a Fix shell injection vulnerabilities in spvblock.py
- Replace user input in subprocess f-strings with safe alternatives:
  - Phoenix CLI: use list-based subprocess.run() with cwd parameter
  - PhoenixD API: replace curl shell commands with requests library
  - Bitaxe API: replace curl shell commands with requests library
  - Luxor CLI: use list-based subprocess.run() with cwd parameter
- Convert Phoenix download/install from shell=True to list-based commands
- Add shlex import for safe argument splitting
- Collapse repeated input/subprocess blocks into loops

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
2026-04-01 11:54:42 -03:00
..
__pycache__ Add files via upload 2022-03-16 00:33:54 -03:00
config Fix critical security vulnerabilities across the codebase 2026-04-01 10:24:47 -03:00
grpc_generated Add files via upload 2022-03-16 00:33:54 -03:00
terminal_matrix Add files via upload 2022-03-16 00:33:54 -03:00
7Blocks.py Create 7Blocks.py 2024-08-17 17:09:32 +02:00
__init__.py Add files via upload 2022-03-16 00:33:54 -03:00
apisnd.py Fix critical security vulnerabilities across the codebase 2026-04-01 10:24:47 -03:00
bitaxe.jpg Add files via upload 2024-07-25 15:26:31 -03:00
clone.py Fix critical security vulnerabilities across the codebase 2026-04-01 10:24:47 -03:00
console.py Fix critical security vulnerabilities across the codebase 2026-04-01 10:24:47 -03:00
donation.py Fix critical security vulnerabilities across the codebase 2026-04-01 10:24:47 -03:00
feed.py Fix critical security vulnerabilities across the codebase 2026-04-01 10:24:47 -03:00
imgterminal.py Fix critical security vulnerabilities across the codebase 2026-04-01 10:24:47 -03:00
lnd.py Harden file handling, exception specificity, and API key management 2026-04-01 11:52:26 -03:00
logic.py Add files via upload 2022-03-15 21:23:22 -03:00
logos.py Add files via upload 2022-03-15 21:23:22 -03:00
nodeconnection.py Refactor architecture: config singleton, logging, menu system, dependencies 2026-04-01 10:58:24 -03:00
pblogo.py Harden file handling, exception specificity, and API key management 2026-04-01 11:52:26 -03:00
ppi.py Harden file handling, exception specificity, and API key management 2026-04-01 11:52:26 -03:00
PyBlockMiner.py Change mining pool port from 3333 to 4444 2025-12-12 20:17:20 +01:00
PyVanityGenerator.py Update PyVanityGenerator.py 2024-10-29 01:51:14 +01:00
sha256.py Update sha256.py 2023-12-27 03:00:27 +01:00
SHS.py Update SHS.py 2024-08-15 04:24:02 +02:00
spvblock.py Fix shell injection vulnerabilities in spvblock.py 2026-04-01 11:54:42 -03:00
sysinf.py Fix critical security vulnerabilities across the codebase 2026-04-01 10:24:47 -03:00