- resolveBaseUrl() rejects client-supplied non-public baseUrls via assertPublicUrl (SSRF guard on /v1/search) - fresh-install remote login with default password returns 403 without issuing a JWT - /api/usage/request-details redacts request/providerRequest/providerResponse/response payloads - declare chalk and prop-types in package.json (used but previously undeclared) |
||
|---|---|---|
| .. | ||
| chatCore | ||
| embeddingProviders | ||
| fetch | ||
| imageProviders | ||
| search | ||
| ttsProviders | ||
| chatCore.js | ||
| embeddingsCore.js | ||
| imageGenerationCore.js | ||
| responsesHandler.js | ||
| sttCore.js | ||
| ttsCore.js | ||
| videoCore.js | ||