Danny Avila 6fa94d3eb8 🔐 fix: Secure iconURL Handling (#10753) ... * 🔒 fix: `iconURL` in conversation parsing - Updated the `buildEndpointOption` middleware to derive `iconURL` from model specs when not provided by the client, improving security by preventing malicious URLs. - Modified the `parseCompactConvo` function to strip `iconURL` from conversation inputs, ensuring it is only set server-side. - Added comprehensive tests to validate the stripping of `iconURL` across various endpoint types, enhancing overall input sanitization. * ✨ feat: Add ESLint rule for unused variables - Introduced a new ESLint rule to warn about unused variables, allowing for better code quality and maintainability. - Configured the rule to ignore variables and arguments that start with an underscore, accommodating common coding practices.		2025-12-01 17:41:39 -05:00
..
actions.spec.ts	🔒 feat: Enhance Actions SSRF Protection with Comprehensive IP and Domain Validation (#10583)	2025-11-19 17:42:17 -05:00
azure.spec.ts
bedrock.spec.ts
filetypes.spec.ts	📎 feat: Upload as Text Support for Plaintext, STT, RAG, and Token Limits (#8868)	2025-08-27 03:44:39 -04:00
generate.spec.ts	🪐 feat: Initial OpenAI Responses API Support (#8149)	2025-06-30 18:34:47 -04:00
openapiSpecs.ts	📋 feat: Support Custom Content-Types in Action Descriptors (#9364)	2025-08-29 23:02:40 -04:00
parsers.spec.ts	🔐 fix: Secure iconURL Handling (#10753)	2025-12-01 17:41:39 -05:00
utils.spec.ts