b9dfb86260
Security hardening release addressing CodeQL and Dependabot alerts: - Fix stack trace exposure in error responses - Add SSRF protection with DNS resolution checking - Implement proper URL hostname validation (replaces substring matching) - Add centralized path sanitization to prevent path traversal - Fix ReDoS vulnerability in email validation regex - Improve HTML sanitization in validation utilities - Fix capability wildcard matching in auth utilities - Update glob dependency to address CVE - Add CodeQL suppression comments for verified false positives 🤖 Generated with [Claude Code](https://claude.com/claude-code) Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
35 lines
1.2 KiB
Docker
35 lines
1.2 KiB
Docker
# Development Dockerfile for Control Panel Frontend
|
|
# This is separate from production Dockerfile
|
|
|
|
FROM node:18-alpine
|
|
|
|
WORKDIR /app
|
|
|
|
# Install dependencies for building native modules
|
|
RUN apk add --no-cache python3 make g++ git
|
|
|
|
# Copy package files from the app
|
|
COPY package.json ./
|
|
|
|
# Remove problematic Radix UI packages temporarily
|
|
RUN sed -i '/"@radix-ui\/react-badge":/d; /"@radix-ui\/react-button":/d; /"@radix-ui\/react-card":/d; /"@radix-ui\/react-form":/d; /"@radix-ui\/react-input":/d; /"@radix-ui\/react-table":/d' package.json
|
|
|
|
# Remove workspace dependencies temporarily for install
|
|
RUN sed -i '/"@gt2\/types":/d; /"@gt2\/utils":/d' package.json
|
|
|
|
# Install dependencies (using npm install since we don't have lock files)
|
|
RUN npm install
|
|
|
|
# Copy application code
|
|
COPY . .
|
|
|
|
# Create minimal workspace packages
|
|
RUN mkdir -p node_modules/@gt2/types node_modules/@gt2/utils
|
|
RUN echo "export const GT2_VERSION = '1.0.0-dev';" > node_modules/@gt2/types/index.js
|
|
RUN echo "export const formatDate = (d) => new Date(d).toLocaleDateString();" > node_modules/@gt2/utils/index.js
|
|
|
|
# Expose port
|
|
EXPOSE 3000
|
|
|
|
# Development command (will be overridden by docker-compose)
|
|
CMD ["npm", "run", "dev"] |