LibreChat/api/app
Danny Avila 972402e029
🛡️ : Security Enhancements (#1681)
* fix: sanitize HTTP params and do not send whole error objects backs

* fix: prevent path traversal

* fix: send custom error message for tokenizer route

* chore: handle info exposure vector

* chore(oauth): skip check due to false positive as oauth routes are rate-limited

* chore(app): disable `x-powered-by`

* chore: disable false positives or flagging of hardcoded secrets when they are fake values

* chore: add path traversal safety check
2024-01-30 14:34:02 -05:00
..
clients 🛡️ : Security Enhancements (#1681) 2024-01-30 14:34:02 -05:00
bingai.js refactor(api): Central Logging 📜 (#1348) 2023-12-14 07:49:27 -05:00
chatgpt-browser.js chore: switch from @waylaidwanderer/chatgpt-api to nodejs-gpt for latest fixes (#1050) 2023-10-14 13:06:50 -04:00
index.js refactor: Encrypt & Expire User Provided Keys, feat: Rate Limiting (#874) 2023-09-06 10:46:27 -04:00
titleConvoBing.js refactor(api): Central Logging 📜 (#1348) 2023-12-14 07:49:27 -05:00