SchiZzA f4da5fdb27 fix(security): harden forwarders, cap native ecowitt entities, reject empty creds ... - S8: received_data now rejects empty configured credentials (IncorrectDataError) and present-but-empty incoming credentials (HTTPUnauthorized) instead of relying solely on the config flow. Credential validation extracted into _validate_credentials() (also resolves the C901 complexity warning and unifies the WU/WSLink branches). - S6: cap auto-created native Ecowitt entities (MAX_NATIVE_ECOWITT_SENSORS) to bound entity-registry growth from a fabricated multi-key payload. - S5: store only the exception class name in Windy/Pocasi last_error (surfaced via entity attributes; str(ex) could embed the request URL). - S7: verified safe - the native-sensor INFO log is parametrized (%s), so no format-string injection; left as-is. 308 passing, 100% coverage; ruff + basedpyright clean. Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>		2026-07-25 21:47:52 +02:00
..
sws12500	fix(security): harden forwarders, cap native ecowitt entities, reject empty creds	2026-07-25 21:47:52 +02:00