Security hardening release addressing CodeQL and Dependabot alerts: - Fix stack trace exposure in error responses - Add SSRF protection with DNS resolution checking - Implement proper URL hostname validation (replaces substring matching) - Add centralized path sanitization to prevent path traversal - Fix ReDoS vulnerability in email validation regex - Improve HTML sanitization in validation utilities - Fix capability wildcard matching in auth utilities - Update glob dependency to address CVE - Add CodeQL suppression comments for verified false positives 🤖 Generated with [Claude Code](https://claude.com/claude-code) Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
27 lines
576 B
Python
27 lines
576 B
Python
"""
|
|
WebSocket module for GT 2.0 real-time chat functionality.
|
|
|
|
Provides secure, tenant-isolated WebSocket connections for:
|
|
- Real-time chat messaging
|
|
- Typing indicators
|
|
- Connection management
|
|
- Event broadcasting
|
|
"""
|
|
|
|
from .manager import (
|
|
WebSocketManager,
|
|
WebSocketConnection,
|
|
ChatMessage,
|
|
websocket_manager,
|
|
get_websocket_manager,
|
|
authenticate_websocket_connection
|
|
)
|
|
|
|
__all__ = [
|
|
"WebSocketManager",
|
|
"WebSocketConnection",
|
|
"ChatMessage",
|
|
"websocket_manager",
|
|
"get_websocket_manager",
|
|
"authenticate_websocket_connection"
|
|
] |