Fix code formatting, Python 3.8 compatibility, and security vulnerabilities

[Copilot]

This PR addresses several critical issues identified during a comprehensive code review of the CodeXRays project:

🔒 Security Fixes

Fixed a path traversal vulnerability in the export functionality that could allow attackers to write files outside the intended directory:

# Before (vulnerable)
safe_id = re.sub(r"[^A-Za-z0-9_.-]", "_", item_id)
path = f"codexrays_export_{safe_id}_{out_idx}_{ts}.txt"

# After (secure)
safe_id = re.sub(r"[^A-Za-z0-9_-]", "_", item_id)[:50]
safe_id = safe_id.strip("_.-")
if not safe_id or safe_id.startswith('.'):
    safe_id = "item"
path = os.path.basename(f"codexrays_export_{safe_id}_{out_idx}_{ts}.txt")

The fix includes:

• Robust filename sanitization with length limits
• Removal of dangerous characters like dots from filename prefixes
• Use of os.path.basename() to ensure files are created only in the current directory
• Fallback handling for edge cases (empty strings, all special characters)

🐍 Python 3.8 Compatibility

Fixed type annotation compatibility issues where list[str] syntax was used (requires Python 3.9+) but the project supports Python 3.8+:

# Before (Python 3.9+ only)
def _wrap_text(self, text: str, width: int) -> list[str]:

# After (Python 3.8+ compatible)  
def _wrap_text(self, text: str, width: int) -> List[str]:

Updated 10+ type annotations throughout the codebase and added the missing List import.

🎨 Code Formatting

Standardized code formatting using Black according to the project's configuration in pyproject.toml:

• Reformatted 5 files (main module + all test files)
• Fixed line length violations and inconsistent spacing
• Ensured compliance with project's 100-character line limit

🧪 Quality Assurance

All changes maintain backward compatibility and functionality:

• ✅ All 7 existing tests continue to pass
• ✅ Ruff linting passes with "All checks passed!"
• ✅ Black formatting passes with no reformatting needed
• ✅ Application help command and core functionality verified
• ✅ Security fixes validated with custom test cases

These minimal, surgical changes address the most critical issues while following the project's guidelines for focused modifications and maintaining the existing codebase's stability.

---

💬 Share your feedback on Copilot coding agent for the chance to win a $200 gift card! Click here to start the survey.