Address Codacy findings on PR #96

* Bandit B110 (event_loop.py:189) — replace bare pass in
  CDPEventListener.stop()'s ws.close() except with a debug-log line so
  the cleanup failure is at least visible in WEBRunner.log.
* Bandit B110 (_navigation_mixin.py:161) — same fix for the best-effort
  window-restore branch in _switch_to_window_by_attr.
* Bandit B310 (event_loop.py:72) — annotate the urlopen call with
  '# nosec B310' plus a comment explaining the scheme is a fixed-literal
  http:// (only debugger_address host:port varies, no user-controlled
  scheme so no file:// risk).

Author: JE-Chen

je_web_runner/utils/cdp/event_loop.py

@@ -69,7 +69,9 @@ def _query_page_ws_url(debugger_address: str) -> str:
     # the ``--remote-debugging-port``, is HTTP-only by browser design, and
     # binds to localhost. Forcing https here would simply fail to connect.
     url = f"http://{debugger_address}/json"  # NOSONAR python:S5332 — DevTools endpoint is HTTP-only by design
-    with urllib.request.urlopen(url, timeout=5) as response:  # noqa: S310 — local devtools endpoint
+    # Bandit B310: scheme is fixed-literal ``http://`` above, not user-controlled — only
+    # ``debugger_address`` (host:port) varies, so no file:// or custom-scheme risk.
+    with urllib.request.urlopen(url, timeout=5) as response:  # nosec B310  # noqa: S310 — local devtools endpoint
         targets = json.loads(response.read())
     pages = [t for t in targets if t.get("type") == "page"]
     if not pages:
@@ -186,8 +188,8 @@ def stop(self, join_timeout: float = 2.0) -> None:
         if ws is not None:
             try:
                 ws.close()
-            except Exception:  # noqa: BLE001 — best-effort
-                pass
+            except Exception as error:  # noqa: BLE001 — best-effort cleanup
+                web_runner_logger.debug(f"CDPEventListener ws.close failed: {error!r}")
         thread = self._thread
         self._thread = None
         if thread is not None and thread.is_alive():

je_web_runner/webdriver/_wrapper_mixins/_navigation_mixin.py

@@ -158,8 +158,11 @@ def _switch_to_window_by_attr(self, attr_name: str, pattern: str) -> bool:
             if original is not None:
                 try:
                     self.current_webdriver.switch_to.window(original)
-                except Exception:  # noqa: BLE001 — best-effort restore
-                    pass
+                except Exception as restore_error:  # noqa: BLE001 — best-effort restore
+                    web_runner_logger.debug(
+                        f"WebDriverWrapper _switch_to_window_by_attr restore failed: "
+                        f"{repr(restore_error)}"
+                    )
             return False
 
     # page / window metadata