Jarian Cottingham
f4b84cc412
- Replace eval() with json.loads() in database.py (RCE fix) - Use json.dumps() for safe storage of list fields - Add API key authentication middleware - Remove hardcoded credentials, require env vars - Disable Flask debug mode - Restrict FTP homedir to /app/data with read-only perms - Fix threading: Lock -> RLock, add WAL mode - Fix API calls to use correct DatabaseManager methods - Fix main.py FTP method names - Fix click.click.echo typo - Implement scheduler _run_all_jobs - Add __main__.py for module execution - Pin dependency versions - Use .env vars in docker-compose, read-only DB for FTP - Implement AI text chunking with overlap windows - Add schema validation for AI responses - Skip unsupported file types instead of fallback
11 lines
199 B
Plaintext
11 lines
199 B
Plaintext
flask==3.0.0
|
|
pyftpdlib==1.5.6
|
|
openai==1.12.0
|
|
pdfminer.six==20231228
|
|
beautifulsoup4==4.12.3
|
|
newspaper3k==0.2.8
|
|
apscheduler==3.10.4
|
|
click==8.1.7
|
|
docker==7.1.0
|
|
requests==2.31.0
|
|
prometheus-client==0.20.0 |