LibreChat/api/server/routes
Danny Avila 972402e029
🛡️ : Security Enhancements (#1681)
* fix: sanitize HTTP params and do not send whole error objects backs

* fix: prevent path traversal

* fix: send custom error message for tokenizer route

* chore: handle info exposure vector

* chore(oauth): skip check due to false positive as oauth routes are rate-limited

* chore(app): disable `x-powered-by`

* chore: disable false positives or flagging of hardcoded secrets when they are fake values

* chore: add path traversal safety check
2024-01-30 14:34:02 -05:00
..
__tests__ 🛡️ : Security Enhancements (#1681) 2024-01-30 14:34:02 -05:00
ask 💫 feat: Config File & Custom Endpoints (#1474) 2024-01-03 09:22:48 -05:00
assistants refactor(api): Central Logging 📜 (#1348) 2023-12-14 07:49:27 -05:00
edit 💫 feat: Config File & Custom Endpoints (#1474) 2024-01-03 09:22:48 -05:00
files 🛡️ : Security Enhancements (#1681) 2024-01-30 14:34:02 -05:00
types WIP: Update UI to match Official Style; Vision and Assistants 👷🏽 (#1190) 2023-11-16 10:42:24 -05:00
auth.js feat: Message Rate Limiters, Violation Logging, & Ban System 🔨 (#903) 2023-09-13 10:57:07 -04:00
balance.js feat: Accurate Token Usage Tracking & Optional Balance (#1018) 2023-10-05 18:34:10 -04:00
config.js refactor(api): Central Logging 📜 (#1348) 2023-12-14 07:49:27 -05:00
convos.js 🛡️ : Security Enhancements (#1681) 2024-01-30 14:34:02 -05:00
endpoints.js refactor: Speed up Config fetching and Setup Config Groundwork 👷🚧 (#1297) 2023-12-06 19:36:57 -05:00
index.js feat: Vision Support + New UI (#1203) 2023-11-21 20:12:48 -05:00
keys.js refactor: Encrypt & Expire User Provided Keys, feat: Rate Limiting (#874) 2023-09-06 10:46:27 -04:00
messages.js 🛡️ : Security Enhancements (#1681) 2024-01-30 14:34:02 -05:00
models.js feat: Accurate Token Usage Tracking & Optional Balance (#1018) 2023-10-05 18:34:10 -04:00
oauth.js 🛡️ : Security Enhancements (#1681) 2024-01-30 14:34:02 -05:00
plugins.js feat(GPT/Anthropic): Continue Regenerating & Generation Buttons (#808) 2023-08-17 12:50:05 -04:00
presets.js 🛡️ : Security Enhancements (#1681) 2024-01-30 14:34:02 -05:00
prompts.js ci(backend-review.yml): add linter step to the backend review workflow (#625) 2023-07-14 09:36:49 -04:00
search.js refactor(api): Central Logging 📜 (#1348) 2023-12-14 07:49:27 -05:00
tokenizer.js 🛡️ : Security Enhancements (#1681) 2024-01-30 14:34:02 -05:00
user.js feat(GPT/Anthropic): Continue Regenerating & Generation Buttons (#808) 2023-08-17 12:50:05 -04:00