mirror of
https://github.com/BerriAI/litellm.git
synced 2026-09-23 00:41:40 +00:00
- Incomplete string escaping: add backslash escaping before quote escaping in TeamGuardrailsTab, CodeSnippets; use regex /g flag in public_model_hub wildcard replace - Clear-text storage: obfuscate sensitive sessionStorage values (API keys, OAuth state, MCP form state) via base64 encoding through new storageUtils helper - XSS-through-DOM: add sanitizeImageSrc helper to validate image src URLs use safe schemes (blob:, data:, http:, https:) before rendering Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com> |
||
|---|---|---|
| .. | ||
| litellm-dashboard | ||