GT AI OS Community Edition v2.0.33

Security hardening release addressing CodeQL and Dependabot alerts:

- Fix stack trace exposure in error responses
- Add SSRF protection with DNS resolution checking
- Implement proper URL hostname validation (replaces substring matching)
- Add centralized path sanitization to prevent path traversal
- Fix ReDoS vulnerability in email validation regex
- Improve HTML sanitization in validation utilities
- Fix capability wildcard matching in auth utilities
- Update glob dependency to address CVE
- Add CodeQL suppression comments for verified false positives

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
This commit is contained in:
HackWeasel
2025-12-12 17:04:45 -05:00
commit b9dfb86260
746 changed files with 232071 additions and 0 deletions

View File

@@ -0,0 +1,42 @@
"""
Database models for GT 2.0 Control Panel
"""
from app.models.tenant import Tenant, TenantResource
from app.models.user import User
from app.models.user_tenant_assignment import UserTenantAssignment
from app.models.user_data import UserResourceData, UserPreferences, UserProgress
from app.models.ai_resource import AIResource
from app.models.usage import UsageRecord
from app.models.audit import AuditLog
from app.models.model_config import ModelConfig, ModelUsageLog
from app.models.tenant_model_config import TenantModelConfig
from app.models.resource_usage import ResourceQuota, ResourceUsage, ResourceAlert, ResourceTemplate, SystemMetrics
from app.models.system import SystemVersion, UpdateJob, BackupRecord, UpdateStatus, BackupType
from app.models.session import Session
__all__ = [
"Tenant",
"TenantResource",
"User",
"UserTenantAssignment",
"UserResourceData",
"UserPreferences",
"UserProgress",
"AIResource",
"UsageRecord",
"AuditLog",
"ModelConfig",
"ModelUsageLog",
"TenantModelConfig",
"ResourceQuota",
"ResourceUsage",
"ResourceAlert",
"ResourceTemplate",
"SystemMetrics",
"SystemVersion",
"UpdateJob",
"BackupRecord",
"UpdateStatus",
"BackupType",
"Session"
]