LibreChat/packages/data-provider/specs
Danny Avila b6ba2711f9
Merge commit from fork
- Implemented validation for OpenAPI specifications to ensure the server URL matches the client-provided domain, preventing SSRF attacks.
- Added domain extraction and validation functions to improve security checks.
- Updated relevant services and routes to utilize the new validation logic, ensuring robust handling of client-provided domains against the OpenAPI spec.
- Introduced comprehensive tests to validate the new security features and ensure correct behavior across various scenarios.
2025-11-11 14:14:55 -05:00
..
actions.spec.ts Merge commit from fork 2025-11-11 14:14:55 -05:00
azure.spec.ts 🔑 fix: Azure Serverless Support for API Key Header & Version (#4791) 2024-11-25 13:33:06 -05:00
bedrock.spec.ts 🪨 feat: Bedrock Support for Claude-4 Reasoning (#7517) 2025-05-23 00:42:51 -04:00
filetypes.spec.ts 📎 feat: Upload as Text Support for Plaintext, STT, RAG, and Token Limits (#8868) 2025-08-27 03:44:39 -04:00
generate.spec.ts 🪐 feat: Initial OpenAI Responses API Support (#8149) 2025-06-30 18:34:47 -04:00
openapiSpecs.ts 📋 feat: Support Custom Content-Types in Action Descriptors (#9364) 2025-08-29 23:02:40 -04:00
parsers.spec.ts 🗓️ feat: Add Special Variables for Prompts & Agents, Prompt UI Improvements (#7123) 2025-04-29 03:49:02 -04:00
utils.spec.ts 🖼️ refactor: Enhance Env Extraction & Agent Image Handling (#6131) 2025-03-01 07:51:12 -05:00