f81e839ba2
- validate instance names at the host lib and web boundary against
[a-z0-9][a-z0-9_-]{0,63} to prevent path traversal via Server.name
- fail-closed on SECRET_KEY: load_config returns None when env unset,
create_app raises if missing or "dev" outside TESTING
- close login timing oracle by hashing a dummy digest when the user
is not found, equalizing response time
- set SESSION_COOKIE_SECURE outside TESTING
- delete_instance tolerates stop_service and fusermount3 failures so
partially-initialized instances clean up without contract breaks;
drops the is_mount() preflight that violated AGENTS.md
- document claim_next_job's single-process assumption
- clarify emit_step contract via docstring
Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
30 lines
1.1 KiB
Python
30 lines
1.1 KiB
Python
import os
|
|
|
|
|
|
DEFAULT_CONFIG: dict[str, object] = {
|
|
"SECRET_KEY": None,
|
|
"DATABASE_URL": "sqlite:///l4d2web.db",
|
|
"STATUS_REFRESH_SECONDS": 8,
|
|
"JOB_WORKER_THREADS": 4,
|
|
"JOB_WORKER_ENABLED": True,
|
|
"JOB_WORKER_POLL_SECONDS": 1,
|
|
"JOB_LOG_REPLAY_LIMIT": 2000,
|
|
"JOB_LOG_LINE_MAX_CHARS": 4096,
|
|
}
|
|
|
|
|
|
def _bool_from_env(raw: str) -> bool:
|
|
return raw.lower() not in {"0", "false", "no"}
|
|
|
|
|
|
def load_config() -> dict[str, object]:
|
|
return {
|
|
"SECRET_KEY": os.getenv("SECRET_KEY"),
|
|
"DATABASE_URL": os.getenv("DATABASE_URL", "sqlite:///l4d2web.db"),
|
|
"STATUS_REFRESH_SECONDS": int(os.getenv("STATUS_REFRESH_SECONDS", "8")),
|
|
"JOB_WORKER_THREADS": int(os.getenv("JOB_WORKER_THREADS", "4")),
|
|
"JOB_WORKER_ENABLED": _bool_from_env(os.getenv("JOB_WORKER_ENABLED", "true")),
|
|
"JOB_WORKER_POLL_SECONDS": float(os.getenv("JOB_WORKER_POLL_SECONDS", "1")),
|
|
"JOB_LOG_REPLAY_LIMIT": int(os.getenv("JOB_LOG_REPLAY_LIMIT", "2000")),
|
|
"JOB_LOG_LINE_MAX_CHARS": int(os.getenv("JOB_LOG_LINE_MAX_CHARS", "4096")),
|
|
}
|