Guard interaction.guild access in has_player_role #24

New Issue

cal · 2026-02-20T06:49:28Z

cal commented

2026-02-20 06:49:28 +00:00

Description

commands/injuries/management.py:57 — interaction.guild.roles is accessed without None guard. The outer @league_only() decorator does verify guild is not None, but has_player_role is a helper that could be called from other contexts without that guard.

File Locations

commands/injuries/management.py:57

Labels

bug

Priority

low

## Description `commands/injuries/management.py:57` — `interaction.guild.roles` is accessed without None guard. The outer `@league_only()` decorator does verify guild is not None, but `has_player_role` is a helper that could be called from other contexts without that guard. ## File Locations - `commands/injuries/management.py:57` ## Labels bug ## Priority low

cal referenced this issue from a commit

2026-02-20 16:39:04 +00:00

fix: address 7 security issues across the codebase

cal commented

2026-02-20 16:48:28 +00:00

Addressed in commit f4be20a on next-release branch. Will be closed when merged to main.

Addressed in commit f4be20a on `next-release` branch. Will be closed when merged to main.

cal commented

2026-02-20 16:48:34 +00:00

Addressed in commit f4be20a on next-release branch. Will be closed when merged to main.

Addressed in commit `f4be20a` on `next-release` branch. Will be closed when merged to main.

cal closed this issue