mirror of
https://github.com/danny-avila/LibreChat.git
synced 2026-07-03 04:42:11 +00:00
0f708c2eb8
Render non-app (no profile=mcp-app) ui:// HTML inert: the static srcDoc iframes in ToolCall, MCPUIResource, and UIResourceCarousel now use sandbox="" so scripts and forms run only through the CSP-applying sandbox proxy. Make the proxy's meta CSP unbypassable by wrapping any document whose markup precedes <head>, so nothing untrusted is parsed before the policy takes effect. Fail closed in resolveAppContext when MCP auth-value resolution throws, logging and rejecting rather than proceeding with unresolved or stale credentials. Validate each MCP_SANDBOX_FRAME_ANCESTORS token against a scheme://host[:port] pattern so a stray ";" cannot inject an extra CSP directive. Rate-limit the app resource endpoints (resources/read, list, templates/list) per user, and correct AppToolResult.content from an empty-tuple type to unknown[]. Add controller tests for the frame-ancestors validation and the auth fail-closed path. |
||
|---|---|---|
| .. | ||
| forkLimiters.js | ||
| importLimiters.js | ||
| index.js | ||
| loginLimiter.js | ||
| mcpAppResourceLimiter.js | ||
| mcpAppToolCallLimiter.js | ||
| messageLimiters.js | ||
| promptUsageLimiter.js | ||
| registerLimiter.js | ||
| resetPasswordLimiter.js | ||
| sttLimiters.js | ||
| toolCallLimiter.js | ||
| ttsLimiters.js | ||
| twoFactorTempLimiter.js | ||
| twoFactorTempLimiter.test.js | ||
| uploadLimiters.js | ||
| verifyEmailLimiter.js | ||