mirror of
https://github.com/danny-avila/LibreChat.git
synced 2026-11-01 19:46:50 +00:00
* feat: introduce optional content protection seam * feat: enforce source-aware content filters * feat: complete source-aware content enforcement * test: activate skill file-text fail-close fixtures * fix: harden source-aware content filters * fix: harden model-bound content filtering * fix: preserve legacy filters and generated files * fix: inspect shared scalar metadata * test: align mocks with current dev dependencies * feat: add persisted content filter safeguards * feat: complete source-aware content filter enforcement * fix: move resume content preflight into TypeScript * fix: close content inspection edge cases * fix: harden content protection boundaries * fix: complete content protection safeguards * test: align persisted memory filter coverage * fix: reconcile content protection with current dev * fix: reconcile content protection with latest dev * fix: close content protection review gaps * fix: enforce source-aware provider boundaries * fix: preserve legacy PII preflight semantics * test: stabilize stored branch preflight fixture * fix: defer agent writes until protected model admission * perf: harden source-aware model-bound filtering * fix: canonicalize provider lineage before validation * fix: satisfy model-bound callback type checks * perf: Bound content protection filtering work * fix: Bound submission array traversal * fix: Stabilize bounded content snapshots * fix: Scope model-bound traversal overflows * fix: Preserve scoped content inspection * fix: Accumulate aggregate traversal scopes * fix: centralize content policy boundaries * test: align deferred tool policy context * test: align controller policy mocks * style: normalize content protection imports * fix: close content policy review gaps * fix: narrow active skill policy config * fix: address content protection review boundaries * fix: retain exact provenance overflow sentinel * fix: preserve literal and scoped provenance updates * fix: narrow persisted edit provenance * fix: isolate exact overflow attribution * fix: centralize stored prompt protection * fix: fail closed on incomplete transcript evidence * fix: align canonical transcript routing * refactor: centralize content policy preflights * fix: isolate upload policy error typing * style: sort policy preflight imports * refactor: centralize content policy boundaries
75 lines
2.4 KiB
JavaScript
75 lines
2.4 KiB
JavaScript
const fs = require('fs').promises;
|
|
const express = require('express');
|
|
const { logger } = require('@librechat/data-schemas');
|
|
const {
|
|
inspectContent,
|
|
extractFileContent,
|
|
hasActiveFileFieldPolicy,
|
|
contentFilterBlockResponse,
|
|
contentFilterUninspectableResponse,
|
|
getBlockedUninspectableFileField,
|
|
} = require('@librechat/api');
|
|
const { getStrategyFunctions } = require('~/server/services/Files/strategies');
|
|
const { resizeAvatar } = require('~/server/services/Files/images/avatar');
|
|
const { getFileStrategy } = require('~/server/utils/getFileStrategy');
|
|
const { filterFile } = require('~/server/services/Files/process');
|
|
|
|
const router = express.Router();
|
|
|
|
router.post('/', async (req, res) => {
|
|
try {
|
|
const appConfig = req.config;
|
|
filterFile({ req, file: req.file, image: true, isAvatar: true });
|
|
if (hasActiveFileFieldPolicy(req.config?.filters, ['name', 'content'])) {
|
|
const finding = inspectContent(extractFileContent({ name: req.file.originalname }), {
|
|
filters: req.config.filters,
|
|
});
|
|
if (finding != null) {
|
|
return res.status(400).json(contentFilterBlockResponse(finding));
|
|
}
|
|
const uninspectableField = getBlockedUninspectableFileField(req.config.filters, ['content']);
|
|
if (uninspectableField != null) {
|
|
return res.status(400).json(contentFilterUninspectableResponse(uninspectableField));
|
|
}
|
|
}
|
|
|
|
const userId = req.user.id;
|
|
const { manual } = req.body;
|
|
const input = await fs.readFile(req.file.path);
|
|
|
|
if (!userId) {
|
|
throw new Error('User ID is undefined');
|
|
}
|
|
|
|
const fileStrategy = getFileStrategy(appConfig, { isAvatar: true });
|
|
const desiredFormat = appConfig.imageOutputType;
|
|
const resizedBuffer = await resizeAvatar({
|
|
userId,
|
|
input,
|
|
desiredFormat,
|
|
});
|
|
|
|
const { processAvatar } = getStrategyFunctions(fileStrategy);
|
|
const url = await processAvatar({
|
|
buffer: resizedBuffer,
|
|
userId,
|
|
manual,
|
|
tenantId: req.user.tenantId,
|
|
});
|
|
|
|
res.json({ url });
|
|
} catch (error) {
|
|
const message = 'An error occurred while uploading the profile picture';
|
|
logger.error(message, error);
|
|
res.status(500).json({ message });
|
|
} finally {
|
|
try {
|
|
await fs.unlink(req.file.path);
|
|
logger.debug('[/files/images/avatar] Temp. image upload file deleted');
|
|
} catch {
|
|
logger.debug('[/files/images/avatar] Temp. image upload file already deleted');
|
|
}
|
|
}
|
|
});
|
|
|
|
module.exports = router;
|