scriptoriumadmin/open-webui
1
0
Fork 0
mirror of https://github.com/open-webui/open-webui.git synced 2026-09-23 00:41:56 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 3
16065 commits 2 branches 171 tags 1.4 GiB
Commit graph

16065 commits

This branch
This branch
All branches
Author SHA1 Message Date
DrMelone
f50b5e479c fix: enforce model access control on /responses endpoint 
The /responses proxy endpoint only required authentication via
get_verified_user but did not check per-model access grants. This
allowed any authenticated user to access any model through this
endpoint, bypassing the access control system.

Extract a shared check_model_access helper into utils/access_control
and replace all inline access control blocks across openai.py and
ollama.py (7 locations) with calls to this helper. This eliminates
code duplication and prevents future policy drift between endpoints.

CWE-862: Missing Authorization
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H (6.5 Medium)
 2026-04-07 19:26:54 +02:00
Shirasawa
6fdd19bf14
I18n: improve Chinese translation (#23347) 
* i18n: improve zh-CN translation

* i18n: improve zh-TW translation
 2026-04-02 06:44:24 -05:00
Timothy Jaeryang Baek
6d6dfbf02c refac 2026-04-02 06:41:10 -05:00
Timothy Jaeryang Baek
342582676a refac 2026-04-02 02:57:45 -05:00
Timothy Jaeryang Baek
60e4d75174 refac 2026-04-02 02:50:05 -05:00
Timothy Jaeryang Baek
4632f200a9 refac 2026-04-02 02:06:21 -05:00
Timothy Jaeryang Baek
9d3e0637c8 refac 2026-04-02 02:05:35 -05:00
Timothy Jaeryang Baek
65ee771fd0 refac 2026-04-02 01:40:50 -05:00
Timothy Jaeryang Baek
0c5399ca53 refac 2026-04-01 18:26:46 -05:00
Timothy Jaeryang Baek
584a9a0920 refac 2026-04-01 07:42:11 -05:00
Timothy Jaeryang Baek
124b7e9154 refac 2026-04-01 07:35:38 -05:00
Timothy Jaeryang Baek
4764dd5d37 refac 2026-04-01 07:34:01 -05:00
Timothy Jaeryang Baek
86472bb445 refac 2026-04-01 07:31:54 -05:00
Timothy Jaeryang Baek
07262fa62c refac 2026-04-01 07:14:18 -05:00
Algorithm5838
a28ea36657
perf: inline update_chat_title_by_id into single DB context (#23214) 2026-04-01 07:06:16 -05:00
Shirasawa
3f7fc1a75a
fix: Fix the error that occurs when the task model does not exist (#23169) 2026-04-01 07:01:25 -05:00
Timothy Jaeryang Baek
60676bfdcf refac 2026-04-01 06:40:49 -05:00
Shirasawa
2734fcad63
fix(sidebar): ChatItem document listener teardown and shared drag image (#23209) 2026-04-01 06:40:02 -05:00
Timothy Jaeryang Baek
3d6e5ff8f9 refac 2026-04-01 06:37:57 -05:00
Timothy Jaeryang Baek
1554be9da6 refac 2026-04-01 06:29:21 -05:00
Timothy Jaeryang Baek
d6a9efca68 refac 2026-04-01 06:13:50 -05:00
Timothy Jaeryang Baek
b3e56e0c92 refac 2026-04-01 06:02:37 -05:00
Timothy Jaeryang Baek
15883e5229 refac 2026-04-01 06:00:53 -05:00
Timothy Jaeryang Baek
0e5696de74 refac 2026-04-01 05:55:48 -05:00
Timothy Jaeryang Baek
70c87a1ed1 refac 2026-04-01 05:54:58 -05:00
Timothy Jaeryang Baek
51b200c67b refac 2026-04-01 05:52:03 -05:00
Timothy Jaeryang Baek
e24683d09c refac 2026-04-01 05:48:21 -05:00
Timothy Jaeryang Baek
61558d59c3 refac 2026-04-01 05:41:26 -05:00
Timothy Jaeryang Baek
0f8d7982e1 refac 2026-04-01 05:40:32 -05:00
Shirasawa
d7a5a903a6
fix: guard completed API with message id (#23184) 2026-04-01 05:39:34 -05:00
Algorithm5838
16e6cb458f
perf: skip replaceTokens when no {{ present (#23161) 2026-04-01 05:37:44 -05:00
Classic298
04919757e4
i18n: German (#23160) 
* Update translation.json

* Update translation.json
 2026-04-01 05:36:56 -05:00
Denis Khachyan
7025cc94cc
feat(config): add environment variable support for DEFAULT_MODEL_PARAMS (#23223) 2026-04-01 05:36:29 -05:00
Algorithm5838
2d83d0f950
perf: replace unescapeHtml DOMParser with html-entities decode (#23165) 2026-04-01 05:35:20 -05:00
Algorithm5838
354a179f6d
perf: skip processChineseContent for non-Chinese content (#23162) 2026-04-01 05:34:50 -05:00
Timothy Jaeryang Baek
b898fc0258 fix: gravatar profile image 2026-04-01 05:33:41 -05:00
Timothy Jaeryang Baek
eb5c95ef8e refac 2026-04-01 05:30:07 -05:00
KRATOS
512d090f6c
i18n: add Tamil (ta-IN) translation (#23311) 
Adds Tamil (India) translations for all existing keys including
Automations feature strings (create, schedule, run, logs, etc.).

Co-authored-by: Claude Sonnet 4.6 <noreply@anthropic.com>
 2026-04-01 05:25:26 -05:00
Timothy Jaeryang Baek
b8d4577292 refac 2026-04-01 05:23:19 -05:00
Timothy Jaeryang Baek
18f6ec68b9 refac 2026-04-01 05:11:48 -05:00
Timothy Jaeryang Baek
7bfd9ac8ac fix: expand details ui settings 2026-04-01 05:08:28 -05:00
Timothy Jaeryang Baek
7c52382c90 refac 2026-04-01 05:03:53 -05:00
Timothy Jaeryang Baek
ebc9ccbe1c refac 2026-04-01 04:51:51 -05:00
Timothy Jaeryang Baek
c8ef5a4f38 chore: format 2026-04-01 04:36:02 -05:00
Timothy Jaeryang Baek
53583f8d83 refac 2026-04-01 04:33:30 -05:00
Timothy Jaeryang Baek
bae5ff938a refac 2026-04-01 04:09:00 -05:00
Timothy Jaeryang Baek
0638b9f56c refac 2026-04-01 04:00:18 -05:00
Timothy Jaeryang Baek
acaf9ab50c refac 2026-04-01 03:36:55 -05:00
Timothy Jaeryang Baek
d30a0531d4 refac 2026-04-01 03:23:01 -05:00
Timothy Jaeryang Baek
5a2ff8b2e5 refac 2026-04-01 01:21:21 -05:00