LibreChat/api/server
Danny Avila 972402e029
🛡️ : Security Enhancements (#1681)
* fix: sanitize HTTP params and do not send whole error objects backs

* fix: prevent path traversal

* fix: send custom error message for tokenizer route

* chore: handle info exposure vector

* chore(oauth): skip check due to false positive as oauth routes are rate-limited

* chore(app): disable `x-powered-by`

* chore: disable false positives or flagging of hardcoded secrets when they are fake values

* chore: add path traversal safety check
2024-01-30 14:34:02 -05:00
..
controllers 🛡️ : Security Enhancements (#1681) 2024-01-30 14:34:02 -05:00
middleware 🚀 Feat: Streamline File Strategies & GPT-4-Vision Settings (#1535) 2024-01-11 11:37:54 -05:00
routes 🛡️ : Security Enhancements (#1681) 2024-01-30 14:34:02 -05:00
services 🛡️ : Security Enhancements (#1681) 2024-01-30 14:34:02 -05:00
utils 💫 feat: Config File & Custom Endpoints (#1474) 2024-01-03 09:22:48 -05:00
index.js 🛡️ : Security Enhancements (#1681) 2024-01-30 14:34:02 -05:00
socialLogins.js 🚀 Feat: Streamline File Strategies & GPT-4-Vision Settings (#1535) 2024-01-11 11:37:54 -05:00