PDP-1401: Harden proxy security: input allow-listing, size caps, CORS…

.github/workflows/tests.yml

@@ -97,3 +97,21 @@ jobs:
 
       - name: Release artifact check
         run: RELEASE_DIR=build/progress-agentic-rag-connector docker compose -f docker/docker-compose.yml run --rm release-check
+
+      - name: Plugin Check
+        run: |
+          docker run --rm \
+            --network progress-agentic-rag-ci \
+            --user 0 \
+            -e WORDPRESS_DB_HOST=progress-agentic-rag-ci-db \
+            -e WORDPRESS_DB_USER=wordpress \
+            -e WORDPRESS_DB_PASSWORD=wordpress \
+            -e WORDPRESS_DB_NAME=wordpress \
+            -e WP_PATH=/var/www/html \
+            -e WP_URL=http://progress-agentic-rag-ci-wordpress \
+            -e PLUGIN_CHECK_TARGET=progress-agentic-rag-connector/progress-agentic-rag.php \
+            -v progress-agentic-rag-ci-wp:/var/www/html \
+            -v "$PWD/build/progress-agentic-rag-connector":/var/www/html/wp-content/plugins/progress-agentic-rag-connector:ro \
+            -v "$PWD/docker/scripts/run-plugin-check.sh":/run-plugin-check.sh:ro \
+            wordpress:cli \
+            sh -c 'wp plugin activate progress-agentic-rag-connector/progress-agentic-rag.php --allow-root --path=/var/www/html --url=http://progress-agentic-rag-ci-wordpress && sh /run-plugin-check.sh'

progress-agentic-rag.php

@@ -8,15 +8,14 @@
  * Plugin Name:       Progress Agentic RAG connector
  * Plugin URI:        https://github.com/nuclia/wordpress-plugin
  * Description:       Index WordPress content into Progress Agentic RAG and power knowledge-base search.
- * Version:           1.0.2
+ * Version:           1.0.3
  * Requires at least: 6.8
  * Requires PHP:      8.1
  * Author:            Progress Software
  * Author URI:        https://www.progress.com/
  * License:           GPL v3 or later
  * License URI:       https://www.gnu.org/licenses/gpl-3.0.html
  * Text Domain:       progress-agentic-rag-connector
- * Domain Path:       /languages
  */
 
 use ProgressAgenticRag\Autoloader;
@@ -30,7 +29,7 @@
 }
 
 // phpcs:disable WordPress.NamingConventions.PrefixAllGlobals.NonPrefixedConstantFound -- Public plugin constants already use the Progress Agentic RAG prefix.
-define( 'PROGRESS_AGENTIC_RAG_VERSION', '1.0.2' );
+define( 'PROGRESS_AGENTIC_RAG_VERSION', '1.0.3' );
 define( 'PROGRESS_AGENTIC_RAG_MIN_PHP_VERSION', '8.1' );
 define( 'PROGRESS_AGENTIC_RAG_MIN_WP_VERSION', '6.8' );
 define( 'PROGRESS_AGENTIC_RAG_FILE', __FILE__ );

readme.txt

@@ -2,8 +2,8 @@
 Contributors: progresssoftware
 Tags: search, ai, knowledge-base, rag, indexing
 Requires at least: 6.8
-Tested up to: 7.0
-Stable tag: 1.0.2
+Tested up to: 7.1
+Stable tag: 1.0.3
 Requires PHP: 8.1
 License: GPLv3 or later
 License URI: https://www.gnu.org/licenses/gpl-3.0.html
@@ -41,8 +41,41 @@ Service details:
 
 No. Service credentials stay server-side, and public widget requests use the server-side proxy.
 
+== Developer Hooks ==
+
+The plugin's front-end proxy exposes two filters for site owners/developers who need
+non-default behavior. Both can be added in a small must-use plugin or a theme's
+`functions.php`.
+
+`progress_agentic_rag_proxy_max_body_bytes` (int)
+Maximum size, in bytes, of a request body the proxy will forward to Progress Agentic
+RAG. Defaults to 5242880 (5 MB), which covers normal chat/search requests and a
+single moderate image upload. Raise it if you enable larger image uploads in the
+widget.
+
+    add_filter( 'progress_agentic_rag_proxy_max_body_bytes', function () {
+        return 10 * MB_IN_BYTES;
+    } );
+
+`progress_agentic_rag_proxy_allowed_origins` (string[])
+Origins allowed to receive a reflected `Access-Control-Allow-Origin` response from
+the proxy. Defaults to the site's own origin only. The requesting `Origin` header
+value is passed as the second argument.
+
+    add_filter( 'progress_agentic_rag_proxy_allowed_origins', function ( $origins, $requesting_origin ) {
+        $origins[] = 'https://staging.example.com';
+        return $origins;
+    }, 10, 2 );
+
 == Changelog ==
 
+= 1.0.3 =
+
+* Security: hardened the front-end proxy — allow-listed and size-capped request paths,
+  query strings, and bodies; restricted CORS to the site's own origin; forced unsafe
+  upstream Content-Types (HTML/SVG/XML/JS) to download instead of render inline.
+* Dev: added CI Plugin Check enforcement; fixed readme/header metadata flagged by it.
+
 = 1.0.2 =
 
 * Fix: Admin pages no longer perform blocking upstream sync/labelset calls