fix: remove custom command from setAlarm to prevent command injection

2026-06-18 15:23:14 +02:00
parent 75b56e2f1e
commit 124a6a4916
3 changed files with 21 additions and 7 deletions
@@ -70,12 +70,10 @@ class Mutation:
    def set_alarm(
        self,
        cron_expression: str,
-        command: Optional[str] = None,
        is_enabled: bool = True,
        id: Optional[str] = None,
    ) -> Alarm:
-        if command is None:
-            command = _default_command()
+        command = _default_command()

        manager = get_manager()
        new_id = manager.set_alarm(