Skip to content

Conversation

@SL-Mar
Copy link
Owner

@SL-Mar SL-Mar commented Nov 11, 2025

Merging review with previous

## Security Enhancements
- Add missing `requests` import in utils.py (CRITICAL BUG FIX)
- Implement URL validation before webbrowser.open() calls
- Add validate_url() function to check URL safety
- Replace hardcoded email with UNPAYWALL_EMAIL environment variable

## Configuration
- Create .env.example documenting all environment variables
- Add support for UNPAYWALL_EMAIL configuration

## Changes
- quantcli/utils.py: Add requests import, urlparse, validate_url()
- quantcli/cli.py: Add URL validation to browser operations
- quantcli/gui.py: Add URL validation to browser operations
- .env.example: Document all configurable environment variables

These changes improve security by validating all URLs before opening
them in the browser and fix the critical missing requests import bug.
- Installation verification steps
- Security testing procedures
- Example workflows
- Troubleshooting guide
- Complete CLI command reference
@SL-Mar SL-Mar merged commit 9a5f173 into refactor/modernize-2025 Nov 11, 2025
@SL-Mar SL-Mar deleted the claude/refactor-modernize-2025-011CV1sadPRrxj5sPHjWp7Wa branch November 11, 2025 10:21
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants