Classic298 5dcca59aee fix: route OAuth profile-picture fetch through the SSRF-safe session (#26699) ... _process_picture_url validated the picture URL with validate_url() but then fetched it with a plain aiohttp session that resolves the hostname again at connect time, leaving a DNS-rebinding TOCTOU window (the same gap already closed for the RAG loader, the content probe, the image fetches and webhook delivery). Routing the fetch through get_ssrf_safe_session() pins the connect-time resolution via _SSRFSafeResolver and rejects non-global addresses, so a rebinding host can no longer redirect the fetch to loopback, RFC1918 or cloud-metadata endpoints. It also stops the forwarded OAuth access_token from leaking to a rebound internal target.		2026-07-27 00:56:24 -04:00
..
data	refac: mv backend files to /open_webui dir	2024-09-04 16:54:48 +02:00
open_webui	fix: route OAuth profile-picture fetch through the SSRF-safe session (#26699)	2026-07-27 00:56:24 -04:00
.dockerignore	fix: litellm config issue	2024-02-24 22:35:11 -08:00
.gitignore	refac	2024-09-06 04:59:20 +02:00
dev.sh	refac	2026-03-24 19:43:30 -05:00
requirements-min.txt	refac	2026-07-26 23:03:32 -04:00
requirements.txt	perf: stop resolving DNS on the thread pool (add aiodns) (#27440)	2026-07-26 23:29:52 -04:00
start.sh	refac	2026-06-17 03:01:11 +02:00
start_windows.bat	refac	2026-06-17 03:01:11 +02:00