LibreChat/api/server/controllers
Danny Avila 972402e029
🛡️ : Security Enhancements (#1681)
* fix: sanitize HTTP params and do not send whole error objects backs

* fix: prevent path traversal

* fix: send custom error message for tokenizer route

* chore: handle info exposure vector

* chore(oauth): skip check due to false positive as oauth routes are rate-limited

* chore(app): disable `x-powered-by`

* chore: disable false positives or flagging of hardcoded secrets when they are fake values

* chore: add path traversal safety check
2024-01-30 14:34:02 -05:00
..
auth refactor(api): Central Logging 📜 (#1348) 2023-12-14 07:49:27 -05:00
AskController.js 🧪 feat: Experimental: Enable Switching Endpoints Mid-Conversation (#1483) 2024-01-03 19:17:42 -05:00
AuthController.js refactor(api): Central Logging 📜 (#1348) 2023-12-14 07:49:27 -05:00
Balance.js feat: Accurate Token Usage Tracking & Optional Balance (#1018) 2023-10-05 18:34:10 -04:00
EditController.js 💫 feat: Config File & Custom Endpoints (#1474) 2024-01-03 09:22:48 -05:00
EndpointController.js 💫 feat: Config File & Custom Endpoints (#1474) 2024-01-03 09:22:48 -05:00
ErrorController.js 🛡️ : Security Enhancements (#1681) 2024-01-30 14:34:02 -05:00
ModelController.js 💫 feat: Config File & Custom Endpoints (#1474) 2024-01-03 09:22:48 -05:00
OverrideController.js 💫 feat: Config File & Custom Endpoints (#1474) 2024-01-03 09:22:48 -05:00
PluginController.js 💫 feat: Config File & Custom Endpoints (#1474) 2024-01-03 09:22:48 -05:00
UserController.js refactor(api): Central Logging 📜 (#1348) 2023-12-14 07:49:27 -05:00