Dependabot Alert: Werkzeug safe_join not safe on Windows

[JennaySDavis]

On Python < 3.11 on Windows, os.path.isabs() does not catch UNC paths like //server/share. Werkzeug's safe_join() relies on this check, and so can produce a path that is not safe, potentially allowing unintended access to data. Applications using Python >= 3.11, or not using Windows, are not vulnerable.

[JennaySDavis]

371 Acceptance Criteria

Pass/Fail	Description
Pass	Regression Testing on 889 Tool

Comments/Additional Notes
N/A

ADA Compliance (Automated scan via Chrome Lighthouse)

Criteria	Score
Performance	96 *
Accessibility	100
Best Practices	100
*Performance score is related to a third-party Google Analytics cookie and cloud.gov = false positive

Passed 11/01/2024 - JSD

[johnbeallgsa]

Thanks for explaining during Demo. Moving to Done.