LibreChat/packages/data-provider/src
Danny Avila 019c59f10e
🎯 fix: Actions Allowed Domains Handling (#11215)
* 🔧 fix: Update domain handling in ActionsInput components for SSRF validation

- Refactored domain extraction logic in ActionsInput components to include protocol in the domain metadata for proper SSRF validation.
- Ensured that the domain is constructed as `${parsedUrl.protocol}//${parsedUrl.hostname}` to enhance security and prevent potential vulnerabilities.

This change improves the handling of user-provided domains and aligns with best practices for security in URL processing.

* 🔧 fix: Include missing `actions` field in AppService configuration
2026-01-05 14:58:26 -05:00
..
react-query 🏗️ feat: Dynamic MCP Server Infrastructure with Access Control (#10787) 2025-12-11 16:38:37 -05:00
types 📤 fix: Show Proper Upload Options for Azure and Agent Endpoints (#11081) 2025-12-25 15:54:15 -05:00
accessPermissions.ts 🏗️ feat: Dynamic MCP Server Infrastructure with Access Control (#10787) 2025-12-11 16:38:37 -05:00
actions.ts 🎯 fix: Actions Allowed Domains Handling (#11215) 2026-01-05 14:58:26 -05:00
api-endpoints.ts 🏺 fix: Restore Archive Functionality with Dedicated Endpoint (#11183) 2026-01-02 19:41:53 -05:00
artifacts.ts 🪟 fix: Windows Build (npm) (#3889) 2024-09-02 10:01:09 -04:00
azure.ts 🔃 refactor: Decouple Effects from AppService, move to data-schemas (#9974) 2025-10-05 06:37:57 -04:00
bedrock.ts 🪨 feat: Add Bedrock Prompt Caching Support (#8271) 2025-11-13 10:21:50 -05:00
config.ts 🍌 feat: Gemini Image Generation Tool (Nano Banana) (#10676) 2026-01-03 11:26:46 -05:00
createPayload.ts ⏸ refactor: Improve UX for Parallel Streams (Multi-Convo) (#11096) 2025-12-25 01:43:54 -05:00
data-service.ts 🏺 fix: Restore Archive Functionality with Dedicated Endpoint (#11183) 2026-01-02 19:41:53 -05:00
feedback.ts 📈 feat: Chat rating for feedback (#5878) 2025-05-30 12:16:34 -04:00
file-config.spec.ts 📂 refactor: Cleanup File Filtering Logic, Improve Validation (#10414) 2025-11-10 19:05:30 -05:00
file-config.ts 📂 fix: Extend MIME Type Support for Developer Code Files (#10908) 2025-12-16 19:55:35 -05:00
generate.ts 🪐 feat: Initial OpenAI Responses API Support (#8149) 2025-06-30 18:34:47 -04:00
headers-helpers.ts chore: add back data-provider 2023-07-30 11:50:24 -04:00
index.ts 📡 refactor: MCP Runtime Config Sync with Redis Distributed Locking (#10352) 2025-12-11 16:36:15 -05:00
keys.ts 🌊 feat: Resumable LLM Streams with Horizontal Scaling (#10926) 2025-12-19 12:14:19 -05:00
mcp.ts 🔒 fix: Restrict MCP Stdio Transport via API (#11184) 2026-01-03 12:47:11 -05:00
messages.ts 🐛 fix: String Interpolation in Messages Endpoint from #9155 (#9312) 2025-08-27 13:48:48 -04:00
models.ts 🪧 feat: Add Custom Group Icon Support for Model Specs (#10782) 2025-12-25 17:21:21 -05:00
parameterSettings.ts 🧠 feat: 'Extra High' Reasoning Effort OpenAI Parameter (#11171) 2026-01-01 12:01:55 -05:00
parsers.ts ⏸ refactor: Improve UX for Parallel Streams (Multi-Convo) (#11096) 2025-12-25 01:43:54 -05:00
permissions.ts 🏗️ feat: Dynamic MCP Server Infrastructure with Access Control (#10787) 2025-12-11 16:38:37 -05:00
request.ts 🧭 fix: Add Base Path Support for Login/Register and Image Paths (#10116) 2025-11-21 11:25:14 -05:00
roles.ts 🏗️ feat: Dynamic MCP Server Infrastructure with Access Control (#10787) 2025-12-11 16:38:37 -05:00
schemas.spec.ts 🤖 feat: Claude Opus 4.5 Token Rates and Window Limits (#10653) 2025-11-24 16:30:56 -05:00
schemas.ts 🧵 fix: Remove Empty String values from Gemini API Payload (#11213) 2026-01-05 14:08:55 -05:00
types.ts ⏸ refactor: Improve UX for Parallel Streams (Multi-Convo) (#11096) 2025-12-25 01:43:54 -05:00
utils.ts 📂 refactor: Cleanup File Filtering Logic, Improve Validation (#10414) 2025-11-10 19:05:30 -05:00