Dayuan Jiang 44840d27b3 fix: prevent SSRF attack via custom base URL (GHSA-9qf7-mprq-9qgm) ...

Require API key when custom base URL is provided to prevent attackers
from redirecting server API keys to malicious endpoints.

CVSS: 9.3 (Critical)

2025-12-15 15:02:18 +09:00

..

ai-config.ts

refactor: eliminate code duplication (DRY principle) (#211)

2025-12-11 14:28:02 +09:00

ai-providers.ts

fix: prevent SSRF attack via custom base URL (GHSA-9qf7-mprq-9qgm)

2025-12-15 15:02:18 +09:00

cached-responses.ts

refactor: simplify LLM XML format to output bare mxCells only (#254)

2025-12-14 14:04:44 +09:00

langfuse.ts

feat: enable recordInputs in Langfuse telemetry

2025-12-07 20:58:44 +09:00

pdf-utils.ts

feat: make PDF/text extraction char limit configurable via env (#214)

2025-12-11 14:14:31 +09:00

storage.ts

refactor: eliminate code duplication (DRY principle) (#211)

2025-12-11 14:28:02 +09:00

system-prompts.ts

refactor: replace text-based edit_diagram with ID-based operations (#267)

2025-12-15 14:22:56 +09:00

token-counter.ts

feat: add daily token limit with actual usage tracking (#171)

2025-12-08 18:56:34 +09:00

use-file-processor.tsx

refactor: eliminate code duplication (DRY principle) (#211)

2025-12-11 14:28:02 +09:00

use-quota-manager.tsx

refactor: eliminate code duplication (DRY principle) (#211)

2025-12-11 14:28:02 +09:00

utils.ts

refactor: replace text-based edit_diagram with ID-based operations (#267)

2025-12-15 14:22:56 +09:00