Add forbidden windows commands to stitching and utilities to check for file name sanitation. Unit tests also added

tests/unit_tests/test_stitching_validation.py

@@ -0,0 +1,49 @@
+"""Unit tests for stitching command validation."""
+
+import pytest
+
+from openflexure_microscope_server.stitching import (
+    StitcherValidationError,
+    validate_command,
+)
+
+
+def test_validate_command_success():
+    """Test valid commands pass validation."""
+    validate_command(["openflexure-stitch", "--stitching_mode", "all", "path/to/scan"])
+    validate_command(["--resize", "0.5", "8192"])
+
+
+def test_validate_command_forbidden():
+    """Test forbidden commands raise error."""
+    with pytest.raises(
+        StitcherValidationError, match="Forbidden element 'sudo' detected"
+    ):
+        validate_command(["sudo", "rm", "-rf", "/"])
+
+    with pytest.raises(
+        StitcherValidationError, match="Forbidden element 'python' detected"
+    ):
+        validate_command(["python", "-c", "print('hello')"])
+
+    with pytest.raises(
+        StitcherValidationError, match="Forbidden element 'sh' detected"
+    ):
+        validate_command(["sh", "-c", "whoami"])
+
+
+def test_validate_command_unsafe_chars():
+    """Test elements with unsafe characters raise error."""
+    with pytest.raises(StitcherValidationError, match="contains unsafe characters"):
+        validate_command(["openflexure-stitch", "path;rm -rf /"])
+
+    with pytest.raises(StitcherValidationError, match="contains unsafe characters"):
+        validate_command(["openflexure-stitch", "path&echo hello"])
+
+
+def test_validate_command_case_insensitive():
+    """Test forbidden command check is case-insensitive."""
+    with pytest.raises(
+        StitcherValidationError, match="Forbidden element 'SUDO' detected"
+    ):
+        validate_command(["SUDO", "ls"])