Security hardening release addressing CodeQL and Dependabot alerts: - Fix stack trace exposure in error responses - Add SSRF protection with DNS resolution checking - Implement proper URL hostname validation (replaces substring matching) - Add centralized path sanitization to prevent path traversal - Fix ReDoS vulnerability in email validation regex - Improve HTML sanitization in validation utilities - Fix capability wildcard matching in auth utilities - Update glob dependency to address CVE - Add CodeQL suppression comments for verified false positives 🤖 Generated with [Claude Code](https://claude.com/claude-code) Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
42 lines
1.2 KiB
Python
42 lines
1.2 KiB
Python
"""
|
|
Database models for GT 2.0 Control Panel
|
|
"""
|
|
from app.models.tenant import Tenant, TenantResource
|
|
from app.models.user import User
|
|
from app.models.user_tenant_assignment import UserTenantAssignment
|
|
from app.models.user_data import UserResourceData, UserPreferences, UserProgress
|
|
from app.models.ai_resource import AIResource
|
|
from app.models.usage import UsageRecord
|
|
from app.models.audit import AuditLog
|
|
from app.models.model_config import ModelConfig, ModelUsageLog
|
|
from app.models.tenant_model_config import TenantModelConfig
|
|
from app.models.resource_usage import ResourceQuota, ResourceUsage, ResourceAlert, ResourceTemplate, SystemMetrics
|
|
from app.models.system import SystemVersion, UpdateJob, BackupRecord, UpdateStatus, BackupType
|
|
from app.models.session import Session
|
|
|
|
__all__ = [
|
|
"Tenant",
|
|
"TenantResource",
|
|
"User",
|
|
"UserTenantAssignment",
|
|
"UserResourceData",
|
|
"UserPreferences",
|
|
"UserProgress",
|
|
"AIResource",
|
|
"UsageRecord",
|
|
"AuditLog",
|
|
"ModelConfig",
|
|
"ModelUsageLog",
|
|
"TenantModelConfig",
|
|
"ResourceQuota",
|
|
"ResourceUsage",
|
|
"ResourceAlert",
|
|
"ResourceTemplate",
|
|
"SystemMetrics",
|
|
"SystemVersion",
|
|
"UpdateJob",
|
|
"BackupRecord",
|
|
"UpdateStatus",
|
|
"BackupType",
|
|
"Session"
|
|
] |