busya
12118ac4ec
P0 — CRITICAL (CWE-798): JWT_SECRET crash-early
Replace hardcoded super-secret-key fallback with os.environ["JWT_SECRET"]
and ${JWT_SECRET:?} syntax in app.py + docker-compose files
P1 — HIGH: Frontend dependency CVEs
Upgrade svelte 5.43.8 → 5.56.4 — resolves devalue DoS (GHSA-g2pg-6438-jwpf)
and svelte XSS (GHSA-crpf-4hrx-3jrp, GHSA-m56q-vw4c-c2cp, GHSA-rcqx-6q8c-2c42)
P2 — MEDIUM: Logging hygiene + contract gaps + tool resolver refactor
Apply _redact_sensitive_fields() in middleware + event streaming
Truncate LLM error body to 100 chars
Add @RATIONALE/@REJECTED to HandleResume + SaveConversation
Refactor deterministic intent matching → LLM-driven tool resolution
P3 — LOW: Translate logging hardening
Move _sanitize_url() to _utils.py (shared, no circular imports)
Sanitize base_url before logging in _llm_call.py and _llm_async_http.py
Emit EXPLORE warning when LLM_SSL_VERIFY=false disables TLS
superset_client module: passed clean — no changes needed
47 lines
1.2 KiB
JSON
Executable File
47 lines
1.2 KiB
JSON
Executable File
{
|
|
"name": "frontend",
|
|
"private": true,
|
|
"version": "0.0.0",
|
|
"type": "module",
|
|
"scripts": {
|
|
"dev": "vite",
|
|
"build": "vite build",
|
|
"preview": "vite preview",
|
|
"test": "vitest run",
|
|
"test:watch": "vitest",
|
|
"test:e2e": "playwright test",
|
|
"test:e2e:ui": "playwright test --ui",
|
|
"test:e2e:debug": "playwright test --debug",
|
|
"lint": "eslint .",
|
|
"lint:fix": "eslint . --fix"
|
|
},
|
|
"devDependencies": {
|
|
"@eslint/js": "^9.0.0",
|
|
"@playwright/test": "^1.60.0",
|
|
"@sveltejs/adapter-static": "^3.0.10",
|
|
"@sveltejs/kit": "^2.49.2",
|
|
"@sveltejs/vite-plugin-svelte": "^6.2.1",
|
|
"@testing-library/jest-dom": "^6.9.1",
|
|
"@testing-library/svelte": "^5.3.1",
|
|
"@vitest/coverage-istanbul": "^4.1.8",
|
|
"@vitest/coverage-v8": "^4.1.8",
|
|
"autoprefixer": "^10.4.0",
|
|
"eslint": "^9.0.0",
|
|
"eslint-plugin-svelte": "^3.0.0",
|
|
"globals": "^16.0.0",
|
|
"jsdom": "^28.1.0",
|
|
"postcss": "^8.4.0",
|
|
"svelte": "^5.56.4",
|
|
"tailwindcss": "^3.0.0",
|
|
"typescript-eslint": "^8.60.1",
|
|
"vite": "^7.2.4",
|
|
"vitest": "^4.1.8"
|
|
},
|
|
"dependencies": {
|
|
"@gradio/client": "^1.0.0",
|
|
"@humanspeak/svelte-markdown": "^1.6.0",
|
|
"date-fns": "^4.1.0",
|
|
"diff2html": "^3.4.56"
|
|
}
|
|
}
|