mirror of
https://github.com/danny-avila/LibreChat.git
synced 2025-12-17 00:40:14 +01:00
- Implemented validation for OpenAPI specifications to ensure the server URL matches the client-provided domain, preventing SSRF attacks. - Added domain extraction and validation functions to improve security checks. - Updated relevant services and routes to utilize the new validation logic, ensuring robust handling of client-provided domains against the OpenAPI spec. - Introduced comprehensive tests to validate the new security features and ensure correct behavior across various scenarios. |
||
|---|---|---|
| .. | ||
| actions.spec.ts | ||
| azure.spec.ts | ||
| bedrock.spec.ts | ||
| filetypes.spec.ts | ||
| generate.spec.ts | ||
| openapiSpecs.ts | ||
| parsers.spec.ts | ||
| utils.spec.ts | ||