litellm/ui
yuneng-jiang 36828d2f5b fix(ui): address CodeQL security alerts from GHAS scan
- Incomplete string escaping: add backslash escaping before quote
  escaping in TeamGuardrailsTab, CodeSnippets; use regex /g flag in
  public_model_hub wildcard replace
- Clear-text storage: obfuscate sensitive sessionStorage values
  (API keys, OAuth state, MCP form state) via base64 encoding through
  new storageUtils helper
- XSS-through-DOM: add sanitizeImageSrc helper to validate image src
  URLs use safe schemes (blob:, data:, http:, https:) before rendering

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
2026-03-20 21:52:08 -07:00
..
litellm-dashboard fix(ui): address CodeQL security alerts from GHAS scan 2026-03-20 21:52:08 -07:00