google-labs-jules[bot]
d22175310a
🚨 Severity: HIGH 💡 Vulnerability: User-provided IMAP `host` in `_test_imap_connection` and `pull_inbox` was not validated against private IPs, creating an SSRF risk. 🎯 Impact: Attackers could abuse the endpoints to port-scan or interact with internal/private network services. 🔧 Fix: Integrated `is_private_ip` from `app.utils.network` to block connections resolving to private, loopback, link-local, or reserved IPs. ✅ Verification: Ran `test_imap_tasks.py` and `test_api_imap_accounts.py` successfully. Checked `ruff` output and diffs. Removed all scratch files from the commit. Co-authored-by: christianlouis <361235+christianlouis@users.noreply.github.com>
DocuElevate Documentation
Welcome to the DocuElevate documentation. This directory contains comprehensive guides to help you install, configure, and use DocuElevate effectively.
Available Documentation
Getting Started
- Setup Wizard Guide - First-run wizard walkthrough and initial configuration
- User Guide - How to use DocuElevate's features and interface
- Browser Extension - Send files and clip web pages directly from your browser
Deployment
- Deployment Guide - Docker Compose and Kubernetes/Helm deployment
- Kubernetes Deployment Guide - Detailed Kubernetes/Helm reference
- Production Readiness Guide - Checklist to go from "it works" to production-hardened
Configuration
- Configuration Overview - Overview of configuration options, including:
- Configuration Guide - Complete list of all available configuration parameters
- Settings Management - Web-based settings UI and API reference
- Database Configuration - SQLite, PostgreSQL, migrations, and optimization
- Google Drive Setup - How to set up Google Drive integration
- Dropbox Setup - How to set up Dropbox integration
- OneDrive Setup - How to set up Microsoft OneDrive/Graph integration
- SharePoint Setup - How to set up Microsoft SharePoint Online integration
- Amazon S3 Setup - How to set up Amazon S3 integration
- Authentication Setup - How to set up user authentication
- Notifications Setup - How to set up system notifications
Security
- Credential Rotation Guide - Procedures for rotating API keys, passwords, and OAuth tokens
Reference
- API Documentation - Complete API reference for developers
- Configuration Troubleshooting - Solutions to common configuration issues
- Troubleshooting - General troubleshooting and solutions to common issues
- Licensing & Compliance - License information and third-party dependency compliance
Additional Resources
- Contributing Guide - How to contribute to DocuElevate development
- License Information - Apache License 2.0 details
Support
If you need additional assistance beyond what's covered in these guides:
- Check the GitHub repository for updates and issues
- Contact the developer through the information provided on the About page
Screenshots
DocuElevate's upload interface
Document management interface
System management interface
DocuElevate processing workflow