feat: completar Fase 2 del Roadmap MVP (Co-docencia, Matriz de Conflictos y Regla Diaria) y auditoria de seguridad

2026-09-19 14:05:16 -03:00
parent 05e197e49f
commit ada39248d7
36 changed files with 3037 additions and 443 deletions
@@ -76,11 +76,13 @@ class GoogleSheetsImporter:
        """Fetch CSV string for a specific sheet gid"""
        separator = '&' if '?' in self.base_url else '?'
        url = f"{self.base_url}{separator}gid={gid}"
+        if not (url.startswith('https://') or url.startswith('http://')):
+            raise ValueError(f"URL scheme not permitted: {url}")
        req = urllib.request.Request(
            url,
            headers={'User-Agent': 'Mozilla/5.0 (Windows NT 10.0; Win64; x64) EduSpace/2.0'}
        )
-        with urllib.request.urlopen(req, timeout=25) as resp:
+        with urllib.request.urlopen(req, timeout=25) as resp:  # nosec B310
            return resp.read().decode('utf-8', errors='replace')

    def parse_sheet_rows(self, csv_content, sheet_name):