LibreChat/api
Danny Avila b6ba2711f9
Merge commit from fork
- Implemented validation for OpenAPI specifications to ensure the server URL matches the client-provided domain, preventing SSRF attacks.
- Added domain extraction and validation functions to improve security checks.
- Updated relevant services and routes to utilize the new validation logic, ensuring robust handling of client-provided domains against the OpenAPI spec.
- Introduced comprehensive tests to validate the new security features and ensure correct behavior across various scenarios.
2025-11-11 14:14:55 -05:00
..
app 📂 refactor: Cleanup File Filtering Logic, Improve Validation (#10414) 2025-11-10 19:05:30 -05:00
cache
config 📜 feat: Configurable Debug Message Length for Logs (#10447) 2025-11-10 21:40:37 -05:00
db 🔀 refactor: Only Cleanup Meili Sync if actually Synced 2025-10-05 22:41:40 -04:00
lib/utils
models 🏷️ fix: Add user ID to MCP tools cache keys (#10201) 2025-10-30 17:09:56 -04:00
server Merge commit from fork 2025-11-11 14:14:55 -05:00
strategies 🛂 feat: Social Login by Provider ID First then Email (#10358) 2025-11-05 09:20:35 -05:00
test
utils 🧮 feat: Enhance Model Pricing Coverage and Pattern Matching (#10173) 2025-10-19 15:23:27 +02:00
jest.config.js
jsconfig.json
package.json 🧰 fix: Unprocessed Tool Calls Edge Case (#10440) 2025-11-10 17:12:06 -05:00
typedefs.js 📦 chore: Remove @langchain/community & Related Legacy Code (#10375) 2025-11-05 19:24:36 -05:00