Security hardening release addressing CodeQL and Dependabot alerts: - Fix stack trace exposure in error responses - Add SSRF protection with DNS resolution checking - Implement proper URL hostname validation (replaces substring matching) - Add centralized path sanitization to prevent path traversal - Fix ReDoS vulnerability in email validation regex - Improve HTML sanitization in validation utilities - Fix capability wildcard matching in auth utilities - Update glob dependency to address CVE - Add CodeQL suppression comments for verified false positives 🤖 Generated with [Claude Code](https://claude.com/claude-code) Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
31 lines
1.1 KiB
JSON
31 lines
1.1 KiB
JSON
{
|
|
"name": "@gt2/tenant-app-e2e",
|
|
"version": "1.0.0",
|
|
"private": true,
|
|
"description": "GT 2.0 Tenant App End-to-End Testing with Playwright",
|
|
"scripts": {
|
|
"test": "playwright test",
|
|
"test:ui": "playwright test --ui",
|
|
"test:headed": "playwright test --headed",
|
|
"test:debug": "playwright test --debug",
|
|
"test:report": "playwright show-report",
|
|
"test:install": "playwright install",
|
|
"test:install-deps": "playwright install-deps",
|
|
"test:codegen": "playwright codegen http://localhost:3002",
|
|
"test:guardian": "playwright test --grep '@guardian'",
|
|
"test:auth": "playwright test --grep '@auth'",
|
|
"test:documents": "playwright test --grep '@documents'",
|
|
"test:chat": "playwright test --grep '@chat'",
|
|
"test:smoke": "playwright test --grep '@smoke'",
|
|
"test:ci": "playwright test --reporter=html,junit",
|
|
"test:visual": "playwright test --grep '@visual'"
|
|
},
|
|
"devDependencies": {
|
|
"@playwright/test": "^1.40.0",
|
|
"@types/node": "^20.9.0",
|
|
"typescript": "^5.3.0"
|
|
},
|
|
"dependencies": {
|
|
"dotenv": "^16.3.1"
|
|
}
|
|
} |