b9dfb86260
Security hardening release addressing CodeQL and Dependabot alerts: - Fix stack trace exposure in error responses - Add SSRF protection with DNS resolution checking - Implement proper URL hostname validation (replaces substring matching) - Add centralized path sanitization to prevent path traversal - Fix ReDoS vulnerability in email validation regex - Improve HTML sanitization in validation utilities - Fix capability wildcard matching in auth utilities - Update glob dependency to address CVE - Add CodeQL suppression comments for verified false positives 🤖 Generated with [Claude Code](https://claude.com/claude-code) Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
21 lines
670 B
SQL
21 lines
670 B
SQL
-- GT 2.0 Tenant Database Creation Script
|
|
-- Creates database for tenant cluster only
|
|
-- This MUST run first (00-prefix ensures execution order)
|
|
|
|
-- Enable logging
|
|
\set ON_ERROR_STOP on
|
|
\set ECHO all
|
|
|
|
-- Create gt2_tenants database for tenant data storage
|
|
SELECT 'CREATE DATABASE gt2_tenants'
|
|
WHERE NOT EXISTS (SELECT FROM pg_database WHERE datname = 'gt2_tenants')\gexec
|
|
|
|
-- Log database creation completion
|
|
DO $$
|
|
BEGIN
|
|
RAISE NOTICE '=== GT 2.0 TENANT DATABASE CREATION ===';
|
|
RAISE NOTICE 'Database created successfully:';
|
|
RAISE NOTICE '- gt2_tenants (tenant data storage with PGVector)';
|
|
RAISE NOTICE '=======================================';
|
|
END $$;
|