LibreChat/packages
Danny Avila 019c59f10e
🎯 fix: Actions Allowed Domains Handling (#11215)
* 🔧 fix: Update domain handling in ActionsInput components for SSRF validation

- Refactored domain extraction logic in ActionsInput components to include protocol in the domain metadata for proper SSRF validation.
- Ensured that the domain is constructed as `${parsedUrl.protocol}//${parsedUrl.hostname}` to enhance security and prevent potential vulnerabilities.

This change improves the handling of user-provided domains and aligns with best practices for security in URL processing.

* 🔧 fix: Include missing `actions` field in AppService configuration
2026-01-05 14:58:26 -05:00
..
api 🧵 fix: Remove Empty String values from Gemini API Payload (#11213) 2026-01-05 14:08:55 -05:00
client 🪜 fix: Layering Conflicts and UX Polish (#11177) 2026-01-02 11:43:03 -05:00
data-provider 🎯 fix: Actions Allowed Domains Handling (#11215) 2026-01-05 14:58:26 -05:00
data-schemas 🎯 fix: Actions Allowed Domains Handling (#11215) 2026-01-05 14:58:26 -05:00