pyblock/pybitblock/SPV/config/bclock.conf at dcb1a961d46eeb945ede256f47aaa2bda9d79f64 - GlcoinCore/pyblock - Forgejo: Beyond coding. We Forge.

GlcoinCore/pyblock

mirror of https://github.com/curly60e/pyblock.git synced 2026-08-15 12:50:38 +02:00

GaltRanch 0224cfe230 Fix critical security vulnerabilities across the codebase

Replace insecure patterns that exposed the application to command injection,
arbitrary code execution, and data interception attacks.

- Replace os.popen/os.system with subprocess.run using argument lists
- Migrate pickle config serialization to JSON format
- Replace bare except: blocks with specific exception types
- Fix insecure HTTP URLs to HTTPS (opreturnbot.com, ascii.live)
- Replace shell curl commands with requests library calls
- Add migrate_config.py script for pickle-to-JSON config migration
- Convert existing SPV config files to JSON format

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

2026-04-01 10:24:47 -03:00

6 lines

No EOL

91 B

Text

Raw Blame History

 {
   "ip_port": "http://",
   "rpcuser": "",
   "rpcpass": "",
   "bitcoincli": "bitcoin-cli"
 }