LibreChat/api/server/services
Danny Avila 972402e029
🛡️ : Security Enhancements (#1681)
* fix: sanitize HTTP params and do not send whole error objects backs

* fix: prevent path traversal

* fix: send custom error message for tokenizer route

* chore: handle info exposure vector

* chore(oauth): skip check due to false positive as oauth routes are rate-limited

* chore(app): disable `x-powered-by`

* chore: disable false positives or flagging of hardcoded secrets when they are fake values

* chore: add path traversal safety check
2024-01-30 14:34:02 -05:00
..
Config 📋 feat: Log Custom Config File and Add Known Model Limits to Custom Endpoint (#1657) 2024-01-27 08:59:04 -05:00
Endpoints 🛡️ : Security Enhancements (#1681) 2024-01-30 14:34:02 -05:00
Files 🛡️ : Security Enhancements (#1681) 2024-01-30 14:34:02 -05:00
Runs refactor(api): Central Logging 📜 (#1348) 2023-12-14 07:49:27 -05:00
AppService.js 🚀 Feat: Streamline File Strategies & GPT-4-Vision Settings (#1535) 2024-01-11 11:37:54 -05:00
AssistantService.js feat: Vision Support + New UI (#1203) 2023-11-21 20:12:48 -05:00
AuthService.js refactor(api): Central Logging 📜 (#1348) 2023-12-14 07:49:27 -05:00
ModelService.js 🚀 feat: Add OPENAI_ORGANIZATION for all OpenAI Requests (#1590) 2024-01-18 20:39:30 -05:00
PluginService.js fix(getUserPluginAuthValue): throws error if no user matches (#1522) 2024-01-08 11:12:51 -05:00
signPayload.js chore: remove jose as Bun now supports JWT 🍞 (#1167) 2023-11-12 00:44:46 -05:00
UserService.js refactor(api): Central Logging 📜 (#1348) 2023-12-14 07:49:27 -05:00