Security hardening: Input validation, CORS, and JWT secret handling

[Copilot]

• Explore repository structure and understand the codebase
• Identify security vulnerabilities in the codebase
• Fix critical security issues:
  • CORS configuration (allow_origins=["*"]) - Now configurable via CORS_ORIGINS env var
  • Hardcoded default JWT secret key - Now uses secure random key with warning
  • Command injection vulnerability in clone_repository - Added URL and branch sanitization
  • Path traversal check improvements - Added comprehensive path validation including URL-encoded variants
  • Add timeout to exec_command - Prevents indefinite execution
• Add security unit tests (31 tests)
• Run code review tool - Fixed all 5 issues identified
• Run CodeQL security scanner - No alerts found
• Document security findings and fixes in docs/SECURITY_REVIEW.md
• Resolve merge conflicts with main branch

Security Review Summary

Vulnerabilities Fixed:

1. CORS Wildcard (HIGH) - Changed from * to configurable origins via CORS_ORIGINS env var
2. JWT Secret (HIGH) - Random secure default with proper environment variable check
3. Command Injection (CRITICAL) - Added input validation for Git URLs, branch names, file paths
4. Path Traversal (HIGH) - Comprehensive checks including URL-encoded patterns
5. Execution Timeout (MEDIUM) - Added timeout to prevent DoS via long-running commands

Tests Added:

• 31 unit tests for security sanitization functions
• All tests pass
• CodeQL: No alerts found

---

✨ Let Copilot coding agent set things up for you — coding agent works faster and does higher quality work when set up for your repo.

[quan0715]

@copilot Resolve Conflict

[Copilot]

@copilot Resolve Conflict

Resolved in commit 225d0d9. Merged main branch while preserving all security enhancements:

• Kept enhanced _sanitize_path function in container_service.py
• Kept CORS_ORIGINS setting, updated to main's higher resource limits (4.0 CPU, 8g memory)
• All 31 security tests pass