mirror of
https://github.com/danny-avila/LibreChat.git
synced 2026-08-04 14:57:42 +00:00
92385d5e51
Adds a browser-side prefilter so credentials are caught and redacted
(or refused) before the message even leaves the client, with the
existing server-side enforcement remaining intact for callers that
bypass the UI.
The startup config endpoint now serializes the resolved
messagePiiFilter to a browser-safe wire format: onMatch, redactionText,
and patterns expressed as { id, label, source, flags } so RegExp can
survive JSON and be reconstructed in the client.
A new useClientPiiFilter hook reads that config from React Query and
exposes an apply(text) call. It is wired into useChatFunctions.ask,
the single chokepoint that covers all seven submit paths (form submit,
regenerate, continue, edit-and-resubmit, edit content part, voice
auto-send, programmatic ask).
Mode semantics on the client mirror the server: warn redacts inline
and shows a warning toast, block stops the submission entirely with an
error toast (the POST never fires), silent redacts inline with no UI.
When client redaction has already happened the server pre-redact finds
nothing to scrub and stays silent, so there is no duplicate toast.
The new com_ui_pii_blocked translation key is the only string addition.
|
||
|---|---|---|
| .. | ||
| react-query | ||
| specs | ||
| src | ||
| .gitignore | ||
| babel.config.js | ||
| check_updates.sh | ||
| jest.config.js | ||
| package.json | ||
| rollup.config.js | ||
| server-rollup.config.js | ||
| tsconfig.json | ||
| tsconfig.spec.json | ||