2 commits

Author	SHA1	Message	Date
google-labs-jules[bot]	1c9fd17d0f	🔒 fix argument injection vulnerability in speedtest server parameter ... Validates that the user-provided `--speedtest-server` parameter does not start with a hyphen (`-`) before passing it to `asyncio.create_subprocess_exec` in `tier_ookla`. This prevents option injection vulnerabilities where a malicious user or external script could supply flags (e.g. `--hacked`) that the `speedtest` binary would process. Also adds a test case to prevent regression. Co-authored-by: Horizontal42 <75383519+Horizontal42@users.noreply.github.com>	2026-09-04 07:11:35 +00:00
Horizontal42	0f369ded04	🧪 Consolidate speed tests and add ndt7 test coverage (#30) ... - Rename and consolidate `test_speed_math.py`, `test_speed_fastcom.py`, and `test_speed_cloudflare.py` into a single, comprehensive `tests/test_speed.py`. - Add test coverage for `tier_ndt7` testing happy paths, network errors, and websocket exceptions via mocks. - Ensure 100% pass rate with no regressions. Co-authored-by: google-labs-jules[bot] <161369871+google-labs-jules[bot]@users.noreply.github.com>	2026-08-19 17:49:36 +03:00