WhisperX tag archive

#Dead Code

This page collects WhisperX intelligence signals tagged #Dead Code. It is designed for humans, search engines, and AI agents: each item links to a canonical source-backed record with sector, source, timestamp, credibility, and exportable structured data.

Latest Signals (2)

The Lab · 2026-04-04 12:27:02 · GitHub Issues

1. Frappe Assistant Core: Dead Code Tool with Critical SQL Injection Vulnerability Removed

A critical SQL injection vulnerability has been eliminated from the Frappe Assistant Core project by removing a dormant but dangerous piece of code. The vulnerability resided in the `create_visualization.py` tool, which had been intentionally disabled but remained physically present on the system. This dead code posed ...

The Lab · 2026-04-15 02:22:24 · GitHub Issues

2. Security Flaw: TokenValidationConfig.require_https Flag is Dead Code, Misleading Users on HTTP Support

A critical security configuration flag in the token validation system is non-functional, creating a dangerous mismatch between user expectations and system behavior. The `require_https` boolean field on the `TokenValidationConfig` model is never read by the underlying validation pipeline. Users who explicitly set `requ...