remove dgxie rest api due to potential vulnerability

[dholt]

No description provided.

[Copilot]

Pull request overview

This PR removes the dgxie REST API implementation to address potential security vulnerabilities in the existing code.

Changes:

• Completely removes the REST API implementation file that contained multiple security issues

Comments suppressed due to low confidence (4)

src/containers/dgxie/rest_api.py:1

• Command injection vulnerability: subprocess.check_output is called without shell=False and without validating the script path, which could allow arbitrary command execution if the script path is compromised.
  src/containers/dgxie/rest_api.py:1
• Unsanitized user input from request.form['action'] is written directly to the log file without validation, creating a log injection vulnerability where attackers could inject malicious content or forge log entries.
  src/containers/dgxie/rest_api.py:1
• Flask development server is running without debug=False explicitly set and with no authentication, making the API publicly accessible. Production deployments should use a WSGI server with proper security configuration.
  src/containers/dgxie/rest_api.py:1
• Path traversal vulnerability: the log file path is hardcoded but the file handle is never closed, and the endpoint exposes sensitive log contents without authentication or authorization checks.

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.