LibreChat/api/server/middleware
Danny Avila d012da0065
🛡️ fix: Enhance File Upload Security & Error Handling (#4705)
* fix: sanitize filename in multer storage callback

* fix: ensure temporary image upload file is deleted after processing

* fix: prevent cleanup flag from being set to false before actually deleted

* refactor: user avatar, typing, use 'file' for formData instead of 'input', add disk storage, use localization

* fix: update Avatar component to include image dimensions in formData and refactor editor reference type

* fix: refactor avatar upload handling to use fs for file reading and enhance file validation

* fix: ensure temporary image upload file is deleted after processing

* fix: refactor avatar upload routes and handlers for agents and assistants, improve file handling and validation

* fix: improve audio file validation and cleanup

* fix: add filename sanitization utility and integrate it into multer storage configuration

* fix: update group project ID check for null and refactor delete prompt group response type

* fix: invalid access control for deleting prompt groups

* fix: add error handling and logging to checkBan middleware

* fix: catch conversation parsing errors

* chore: revert unnecessary height and width parameters from avatar upload

* chore: update librechat-data-provider version to 0.7.55

* style: ensure KaTeX can spread across visible space
2024-11-12 16:41:04 -05:00
..
assistants
limiters
roles 🔒 refactor: Apply interface settings to all Roles (#3967) 2024-09-09 20:15:08 -04:00
spec 🛡️ fix: Minor Vulnerabilities (#4543) 2024-10-24 15:50:48 -04:00
validate
abortControllers.js
abortMiddleware.js 🚀 feat: o1 (#4019) 2024-09-12 18:15:43 -04:00
abortRun.js
buildEndpointOption.js 🛡️ fix: Enhance File Upload Security & Error Handling (#4705) 2024-11-12 16:41:04 -05:00
canDeleteAccount.js
checkBan.js 🛡️ fix: Enhance File Upload Security & Error Handling (#4705) 2024-11-12 16:41:04 -05:00
checkDomainAllowed.js
checkInviteUser.js
concurrentLimiter.js
denyRequest.js
index.js
moderateText.js
noIndex.js
optionalJwtAuth.js 🚀 feat: Banner (#3952) 2024-09-11 09:34:25 -04:00
requireJwtAuth.js
requireLdapAuth.js
requireLocalAuth.js
setHeaders.js
uaParser.js
validateEndpoint.js
validateImageRequest.js 🛡️ fix: Minor Vulnerabilities (#4543) 2024-10-24 15:50:48 -04:00
validateMessageReq.js
validateModel.js
validatePasswordReset.js
validateRegistration.js