LibreChat/packages/data-schemas/src
Danny Avila 019c59f10e
🎯 fix: Actions Allowed Domains Handling (#11215)
* 🔧 fix: Update domain handling in ActionsInput components for SSRF validation

- Refactored domain extraction logic in ActionsInput components to include protocol in the domain metadata for proper SSRF validation.
- Ensured that the domain is constructed as `${parsedUrl.protocol}//${parsedUrl.hostname}` to enhance security and prevent potential vulnerabilities.

This change improves the handling of user-provided domains and aligns with best practices for security in URL processing.

* 🔧 fix: Include missing `actions` field in AppService configuration
2026-01-05 14:58:26 -05:00
..
app 🎯 fix: Actions Allowed Domains Handling (#11215) 2026-01-05 14:58:26 -05:00
common feat: Add cursor pagination utilities and refine user/group/role types in @librechat/data-schemas (#9218) 2025-08-23 00:18:31 -04:00
config 🔍 feat: DEBUG_MESSAGE_LENGTH Environment Variable (pt. 2) (#10479) 2025-11-13 08:38:38 -05:00
crypto 🧵 refactor: Migrate Endpoint Initialization to TypeScript (#10794) 2025-12-11 16:37:16 -05:00
methods 🧮 refactor: Replace Eval with Safe Math Expression Parser (#11098) 2025-12-25 12:25:41 -05:00
models 🔧 fix: Incorrect count query in meilisearch sync (#11157) 2025-12-30 11:22:39 -05:00
schema 🔀 refactor: Conditional Mapping Support for Multi-Convo (Parallel) Messages (#11180) 2026-01-02 19:42:54 -05:00
types 🔀 refactor: Conditional Mapping Support for Multi-Convo (Parallel) Messages (#11180) 2026-01-02 19:42:54 -05:00
utils 🔐 feat: Granular Role-based Permissions + Entra ID Group Discovery (#7804) 2025-08-13 16:24:17 -04:00
index.ts 🧮 refactor: Replace Eval with Safe Math Expression Parser (#11098) 2025-12-25 12:25:41 -05:00