Commit Graph

2 Commits

Author SHA1 Message Date
czlonkowski
7147f5ef05 fix: integration test database initialization issues
- Remove non-existent BetterSqlite3Adapter import
- Use createDatabaseAdapter instead of direct instantiation
- Initialize database schema in test setup
- Fix path imports and duplicate imports
2025-09-15 09:13:22 +02:00
czlonkowski
c18c4e7584 fix: address critical security issues in template metadata
- Fix SQL injection vulnerability in template-repository.ts
  - Use proper parameterization with SQLite concatenation operator
  - Escape JSON strings correctly for LIKE queries
  - Prevent malicious SQL through filter parameters

- Add input sanitization for OpenAI API calls
  - Sanitize template names and descriptions before sending to API
  - Remove control characters and prompt injection patterns
  - Limit input length to prevent token abuse

- Lower temperature to 0.3 for consistent structured outputs

- Add comprehensive test coverage
  - 100+ new tests for metadata functionality
  - Security-focused tests for SQL injection prevention
  - Integration tests with real database operations

Co-Authored-By: Claude <noreply@anthropic.com>
2025-09-15 00:51:41 +02:00