Ray Dumasia 3dac0741b1 Fix RCE vulnerability and harden security ...

- Replace eval() with ast.literal_eval() in pdf_utils.py to fix
  unauthenticated remote code execution via crafted PDF uploads
  (reported by OX Security)
- Sanitize HTML output with DOMPurify to prevent XSS
- Restrict CORS origins (configurable via CORS_ORIGINS env var)
- Suppress raw exception details in API error responses
- Cap Image.MAX_IMAGE_PIXELS to prevent decompression bomb DoS
- Add security regression test suite

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

2026-03-31 09:01:52 +01:00

..

Dockerfile

Fix Dockerfile to copy all Python files including pdf_utils and format_converter

2025-11-15 14:38:54 +00:00

format_converter.py

Add PDF processing and multi-format document conversion

2025-11-15 14:25:09 +00:00

main.py

Fix RCE vulnerability and harden security

2026-03-31 09:01:52 +01:00

pdf_utils.py

Fix RCE vulnerability and harden security

2026-03-31 09:01:52 +01:00

requirements.txt

Add PDF processing and multi-format document conversion

2025-11-15 14:25:09 +00:00

test_security.py

Fix RCE vulnerability and harden security

2026-03-31 09:01:52 +01:00