LibreChat/api/strategies
Danny Avila 972402e029
🛡️ : Security Enhancements (#1681)
* fix: sanitize HTTP params and do not send whole error objects backs

* fix: prevent path traversal

* fix: send custom error message for tokenizer route

* chore: handle info exposure vector

* chore(oauth): skip check due to false positive as oauth routes are rate-limited

* chore(app): disable `x-powered-by`

* chore: disable false positives or flagging of hardcoded secrets when they are fake values

* chore: add path traversal safety check
2024-01-30 14:34:02 -05:00
..
discordStrategy.js 🚀 Feat: Streamline File Strategies & GPT-4-Vision Settings (#1535) 2024-01-11 11:37:54 -05:00
facebookStrategy.js 🚀 Feat: Streamline File Strategies & GPT-4-Vision Settings (#1535) 2024-01-11 11:37:54 -05:00
githubStrategy.js 🚀 Feat: Streamline File Strategies & GPT-4-Vision Settings (#1535) 2024-01-11 11:37:54 -05:00
googleStrategy.js 🚀 Feat: Streamline File Strategies & GPT-4-Vision Settings (#1535) 2024-01-11 11:37:54 -05:00
index.js chore: remove jose as Bun now supports JWT 🍞 (#1167) 2023-11-12 00:44:46 -05:00
joseStrategy.js refactor(api): Central Logging 📜 (#1348) 2023-12-14 07:49:27 -05:00
jwtStrategy.js refactor(api): Central Logging 📜 (#1348) 2023-12-14 07:49:27 -05:00
localStrategy.js feat: Logins log for Fail2Ban (#986) 2023-09-24 12:18:10 -04:00
openidStrategy.js refactor(api): Central Logging 📜 (#1348) 2023-12-14 07:49:27 -05:00
process.js 👤 fix: Avatar Check in User Auth (#1677) 2024-01-30 07:31:49 -05:00
validators.js fix: Allow Latin-based Special Characters in Username (#969) 2023-09-18 16:57:12 -04:00
validators.spec.js 🛡️ : Security Enhancements (#1681) 2024-01-30 14:34:02 -05:00