9ad32e40e6
feat(security): add configurable file upload size limits with optional splitting
...
- Add MAX_UPLOAD_SIZE config (default 1GB) to prevent resource exhaustion
- Add MAX_SINGLE_FILE_SIZE config for optional PDF file splitting
- Implement automatic PDF splitting when files exceed single file limit
- Update upload endpoint to use configured limits instead of hardcoded 500MB
- Add comprehensive tests for upload limits and file splitting
- Document configuration in ConfigurationGuide.md and SECURITY_AUDIT.md
- Reference SECURITY_AUDIT.md in error messages for user guidance
Co-authored-by: christianlouis <361235+christianlouis@users.noreply.github.com >
2026-02-10 10:51:30 +00:00
489aa67a13
fix(security): remediate path traversal vulnerabilities in file operations
...
- Fix critical vulnerability: sanitize GPT metadata filename before use
- Fix insecure string-based path validation with pathlib methods
- Add validation for GPT-extracted filenames
- Add comprehensive security test suite (24 tests)
- Document all findings in SECURITY_AUDIT.md
Co-authored-by: christianlouis <361235+christianlouis@users.noreply.github.com >
2026-02-10 10:26:42 +00:00
8ac16420b2
Update SECURITY_AUDIT.md with the latest audit results.
2026-02-09 22:08:35 +01:00
b3b74adb45
chore: remove dead files and duplicate workflows
...
- Delete build-setup.sh (empty shell script)
- Delete docker-build.sh (empty shell script)
- Delete .github/workflows/codeql.yaml (duplicate, keeping codeql.yml)
- Delete issues/ directory (3 markdown files)
- Update SECURITY_AUDIT.md to remove completed task about consolidating CodeQL workflows
- Update docs/archive/ANALYSIS_SUMMARY.md to reference codeql.yml instead of codeql.yaml
Co-authored-by: christianlouis <361235+christianlouis@users.noreply.github.com >
2026-02-08 17:02:11 +00:00
7fc2703d90
Increase HTTP request timeout to 120s for large file processing (up to 1GB PDFs)
...
Co-authored-by: christianlouis <361235+christianlouis@users.noreply.github.com >
2026-02-07 19:39:57 +00:00
755ef8a2e5
Add Bandit to CI pipeline and update security audit documentation
...
Co-authored-by: christianlouis <361235+christianlouis@users.noreply.github.com >
2026-02-07 19:38:47 +00:00
f0f48b39a9
Add security fixes, testing infrastructure, and CI/CD improvements
...
Co-authored-by: christianlouis <361235+christianlouis@users.noreply.github.com >
2026-02-06 21:55:19 +00:00
copilot-swe-agent[bot]