Security hardening release addressing CodeQL and Dependabot alerts: - Fix stack trace exposure in error responses - Add SSRF protection with DNS resolution checking - Implement proper URL hostname validation (replaces substring matching) - Add centralized path sanitization to prevent path traversal - Fix ReDoS vulnerability in email validation regex - Improve HTML sanitization in validation utilities - Fix capability wildcard matching in auth utilities - Update glob dependency to address CVE - Add CodeQL suppression comments for verified false positives 🤖 Generated with [Claude Code](https://claude.com/claude-code) Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
38 lines
904 B
Markdown
38 lines
904 B
Markdown
# Code of Conduct
|
|
|
|
## Our Promise
|
|
|
|
We want GT AI OS to be a welcoming place for everyone, regardless of background or experience level.
|
|
|
|
## How to Behave
|
|
|
|
**Do:**
|
|
- Be kind and patient with others
|
|
- Be respectful, even when you disagree
|
|
- Accept feedback gracefully
|
|
- Help others learn
|
|
|
|
**Don't:**
|
|
- Insult or put down others
|
|
- Harass anyone for any reason
|
|
- Share others' private information
|
|
- Be disruptive or offensive
|
|
|
|
## What Happens If Someone Breaks These Rules
|
|
|
|
If someone is behaving badly, we may:
|
|
- Give them a warning
|
|
- Temporarily or permanently ban them from the community
|
|
|
|
## How to Report a Problem
|
|
|
|
If someone is making you uncomfortable or breaking these rules:
|
|
|
|
**Contact us at:** [Contact Us](https://gtedge.ai/contact-us)
|
|
|
|
We take all reports seriously and will respond as quickly as possible.
|
|
|
|
## Attribution
|
|
|
|
This Code of Conduct is based on the Contributor Covenant, version 2.1.
|