Release v1.7.15: security hardening, async auth, CSP tightening, model validation, SSRF guard, rate limiting improvements, frontend extraction, Docker compose security

backend/models/api.py

@@ -1,4 +1,6 @@
-from pydantic import BaseModel, ConfigDict
+from typing import Literal
+
+from pydantic import BaseModel, ConfigDict, Field
 
 
 class EventItem(BaseModel):
@@ -51,35 +53,35 @@ class SourceHealthResponse(BaseModel):
 
 
 class TagsUpdateRequest(BaseModel):
-    tags: list[str]
+    tags: list[str] = Field(..., max_length=50)
 
 
 class BulkTagsRequest(BaseModel):
-    tags: list[str]
-    mode: str = "append"  # "append" or "replace"
+    tags: list[str] = Field(..., max_length=50)
+    mode: Literal["append", "replace"] = "append"
 
 
 class CommentAddRequest(BaseModel):
-    text: str
+    text: str = Field(..., min_length=1, max_length=5000)
 
 
 class AlertCondition(BaseModel):
-    field: str
-    op: str  # eq, neq, contains, in, after_hours
+    field: str = Field(..., max_length=100)
+    op: Literal["eq", "neq", "contains", "in", "after_hours", "threshold_count"]
     value: str | list[str] | None = None
 
 
 class AlertRuleResponse(BaseModel):
     id: str | None = None
-    name: str
+    name: str = Field(..., max_length=200)
     enabled: bool
-    severity: str
-    conditions: list[AlertCondition]
-    message: str
+    severity: Literal["high", "medium", "low"]
+    conditions: list[AlertCondition] = Field(..., max_length=20)
+    message: str = Field(..., max_length=1000)
 
 
 class AskRequest(BaseModel):
-    question: str
+    question: str = Field(..., min_length=1, max_length=2000)
     services: list[str] | None = None
     actor: str | None = None
     operation: str | None = None