LibreChat/api/app/clients/tools/util
Danny Avila 972402e029
🛡️ : Security Enhancements (#1681)
* fix: sanitize HTTP params and do not send whole error objects backs

* fix: prevent path traversal

* fix: send custom error message for tokenizer route

* chore: handle info exposure vector

* chore(oauth): skip check due to false positive as oauth routes are rate-limited

* chore(app): disable `x-powered-by`

* chore: disable false positives or flagging of hardcoded secrets when they are fake values

* chore: add path traversal safety check
2024-01-30 14:34:02 -05:00
..
addOpenAPISpecs.js feat(GPT/Anthropic): Continue Regenerating & Generation Buttons (#808) 2023-08-17 12:50:05 -04:00
addOpenAPISpecs.spec.js feat: ChatGPT Plugins/OpenAPI specs for Plugins Endpoint (#620) 2023-07-16 12:19:47 -04:00
handleOpenAIErrors.js refactor(api): Central Logging 📜 (#1348) 2023-12-14 07:49:27 -05:00
handleTools.js 🚀 Feat: Streamline File Strategies & GPT-4-Vision Settings (#1535) 2024-01-11 11:37:54 -05:00
handleTools.test.js 🛡️ : Security Enhancements (#1681) 2024-01-30 14:34:02 -05:00
index.js fix(OpenAIClient): use official SDK to identify client and avoid false Rate Limit Error (#1161) 2023-11-09 14:04:36 -05:00
loadSpecs.js refactor(api): Central Logging 📜 (#1348) 2023-12-14 07:49:27 -05:00
loadSpecs.spec.js feat: ChatGPT Plugins/OpenAPI specs for Plugins Endpoint (#620) 2023-07-16 12:19:47 -04:00
loadToolSuite.js refactor(plugins): Improve OpenAPI handling, Show Multiple Plugins, & Other Improvements (#845) 2023-08-28 12:03:08 -04:00