Danny Avila ee44c6344d 🔒 feat: Sanitize Placeholders in User-provided MCP Server Config (#11486) ... * 🔒 feat: Sanitize Placeholders in User-provider MCP Server Config Headers * Implemented sanitization for dangerous credential placeholders in headers to prevent credential exfiltration when MCP servers are shared. * Added tests to verify that dangerous placeholders are stripped from headers during both add and update operations, while safe placeholders are preserved. * Refactored ServerConfigsDB to include a new sanitizeCredentialPlaceholders function for header processing. * ci: tests for preserving credential placeholders in YAML configs * Introduced new tests to ensure that LIBRECHAT_OPENID and LIBRECHAT_USER placeholders are preserved in admin configuration headers when added to the cache. * Validated that the expected placeholders remain intact during retrieval, enhancing the integrity of configuration management.		2026-01-23 09:06:29 -05:00
..
src	🔒 feat: Sanitize Placeholders in User-provided MCP Server Config (#11486)	2026-01-23 09:06:29 -05:00
.gitignore
babel.config.cjs
jest.config.mjs	🔄 refactor: MCP Registry System with Distributed Caching (#10191)	2025-10-31 15:00:21 -04:00
package.json	📦 fix: @librechat/agents v3.0.776 for Anthropic Message Coercion Fix (pt. 2) (#11396)	2026-01-18 18:05:43 -05:00
rollup.config.js
tsconfig-paths-bootstrap.mjs
tsconfig.build.json
tsconfig.json	🌊 feat: Resumable LLM Streams with Horizontal Scaling (#10926)	2025-12-19 12:14:19 -05:00
tsconfig.spec.json