gt-ai-os-community

GTEdgeAI/gt-ai-os-community

Fork 0

Commit Graph

Author	SHA1	Message	Date
HackWeasel	676d48ea1f	fix: allow Docker networking hostnames in SSRF check for local Ollama The SSRF protection was blocking endpoint tests for Ollama because host.docker.internal and ollama-host resolve to private IPs. These Docker networking hostnames are now allowlisted: - host.docker.internal (Docker's standard for reaching host) - ollama-host (custom alias defined in docker-compose) - gateway.docker.internal (Docker gateway) This enables Community Edition users to test local Ollama endpoints while maintaining SSRF protection against other private IP access. 🤖 Generated with [Claude Code](https://claude.com/claude-code) Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>	2025-12-15 16:12:28 -05:00
HackWeasel	1dbc93f53b	feat: reduce Community Edition user limit from 50 to 10 Reduces the hardcoded max users for Community Edition from 50 to 10. Changes: - Backend: MAX_USERS_COMMUNITY constant (enforcement) - Frontend: Display messages on users and tenants pages - README: Documentation update Ref: GT-Edge-AI-Internal/GT-2.0#289 🤖 Generated with [Claude Code](https://claude.com/claude-code) Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>	2025-12-15 15:25:08 -05:00
HackWeasel	b9dfb86260	GT AI OS Community Edition v2.0.33 Security hardening release addressing CodeQL and Dependabot alerts: - Fix stack trace exposure in error responses - Add SSRF protection with DNS resolution checking - Implement proper URL hostname validation (replaces substring matching) - Add centralized path sanitization to prevent path traversal - Fix ReDoS vulnerability in email validation regex - Improve HTML sanitization in validation utilities - Fix capability wildcard matching in auth utilities - Update glob dependency to address CVE - Add CodeQL suppression comments for verified false positives 🤖 Generated with [Claude Code](https://claude.com/claude-code) Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>	2025-12-12 17:04:45 -05:00

Author

SHA1

Message

Date

HackWeasel

676d48ea1f

fix: allow Docker networking hostnames in SSRF check for local Ollama

The SSRF protection was blocking endpoint tests for Ollama because
host.docker.internal and ollama-host resolve to private IPs.

These Docker networking hostnames are now allowlisted:
- host.docker.internal (Docker's standard for reaching host)
- ollama-host (custom alias defined in docker-compose)
- gateway.docker.internal (Docker gateway)

This enables Community Edition users to test local Ollama endpoints
while maintaining SSRF protection against other private IP access.

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>

2025-12-15 16:12:28 -05:00

HackWeasel

1dbc93f53b

feat: reduce Community Edition user limit from 50 to 10

Reduces the hardcoded max users for Community Edition from 50 to 10.

Changes:
- Backend: MAX_USERS_COMMUNITY constant (enforcement)
- Frontend: Display messages on users and tenants pages
- README: Documentation update

Ref: GT-Edge-AI-Internal/GT-2.0#289

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>

2025-12-15 15:25:08 -05:00

HackWeasel

b9dfb86260

GT AI OS Community Edition v2.0.33

Security hardening release addressing CodeQL and Dependabot alerts:

- Fix stack trace exposure in error responses
- Add SSRF protection with DNS resolution checking
- Implement proper URL hostname validation (replaces substring matching)
- Add centralized path sanitization to prevent path traversal
- Fix ReDoS vulnerability in email validation regex
- Improve HTML sanitization in validation utilities
- Fix capability wildcard matching in auth utilities
- Update glob dependency to address CVE
- Add CodeQL suppression comments for verified false positives

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>

2025-12-12 17:04:45 -05:00

3 Commits