9router/open-sse/handlers/search
zmf 8a527fec91 fix(security): SSRF guard on search baseUrl, default-password remote login, and request-details redaction
- resolveBaseUrl() rejects client-supplied non-public baseUrls via assertPublicUrl (SSRF guard on /v1/search)
- fresh-install remote login with default password returns 403 without issuing a JWT
- /api/usage/request-details redacts request/providerRequest/providerResponse/response payloads
- declare chalk and prop-types in package.json (used but previously undeclared)
2026-08-13 11:50:25 +07:00
..
callers.js fix(security): SSRF guard on search baseUrl, default-password remote login, and request-details redaction 2026-08-13 11:50:25 +07:00
chatSearch.js feat(perplexity): add Agent API provider (#2492) 2026-07-10 11:57:15 +07:00
index.js Enhance token refresh functionality across multiple executors 2026-04-28 17:28:57 +07:00
normalizers.js chore: drop source-attribution comments from provider code 2026-07-29 21:05:23 +07:00