open-webui/backend/open_webui/routers
Classic298 b4ebd0d62f
refac(hardening): apply the same safety checks to generated image downloads (#31623)
When an image generation backend returns a link instead of the image itself, the download now goes through the same safety checks used for other external image downloads. Links on the configured ComfyUI address are still trusted as before, so a ComfyUI server on a local network keeps working.
2026-09-30 19:08:48 +04:00
..
analytics.py fix: apply the group filter to the Analytics hourly chart (#30978) 2026-09-24 12:11:13 -04:00
audio.py fix: keep the speech-to-text extension allowlist when the Audio settings are saved (#30208) 2026-09-19 17:36:38 -04:00
auths.py refac 2026-09-24 12:10:30 -04:00
automations.py fix: automation still shows "Last run Never" after "Run now" (#31583) 2026-09-30 19:01:42 +04:00
calendar.py refac 2026-09-21 08:59:39 -04:00
channels.py fix: members can be added to or removed from a direct message through the API (#31575) 2026-09-30 19:03:32 +04:00
chats.py fix: admins can still read and change other users' chats with ENABLE_ADMIN_CHAT_ACCESS off (#31416) 2026-09-28 01:51:59 +04:00
configs.py fix: keep requested MCP OAuth scope when DCR response omits it (#30384) 2026-09-23 23:52:29 -04:00
evaluations.py fix: load the leaderboard activity chart for model ids that contain a slash (#30456) 2026-09-23 23:32:42 -04:00
files.py refac 2026-09-21 10:19:59 -04:00
folders.py refac: folder file checks (#30442) 2026-09-23 23:36:15 -04:00
functions.py fix: drop a deleted plugin's source from the content cache (#29983) 2026-09-13 20:21:40 -04:00
groups.py refac 2026-06-29 05:47:21 -05:00
images.py refac(hardening): apply the same safety checks to generated image downloads (#31623) 2026-09-30 19:08:48 +04:00
knowledge.py refac 2026-09-21 10:19:59 -04:00
memories.py refac 2026-09-16 00:34:24 -04:00
models.py refac 2026-09-21 10:25:20 -04:00
notes.py refac 2026-09-22 13:13:22 -04:00
notifications.py refac 2026-07-27 19:39:36 -04:00
ollama.py fix: model upload, download and unload ignore a connection's custom headers and auth type (#31490) 2026-09-28 01:48:26 +04:00
openai.py refac 2026-09-27 23:29:38 +04:00
pipelines.py perf: skip pipeline filter session setup when no filters exist (#29146) 2026-08-28 12:22:23 -04:00
prompts.py refac 2026-08-31 00:39:16 -04:00
retrieval.py feat: add a Tavily search depth setting (#31308) 2026-09-27 23:15:09 +04:00
scim.py refac 2026-09-17 20:11:05 -04:00
skills.py perf: stop scanning every skill on each listing and chat turn (#28798) 2026-08-19 11:07:33 -07:00
tasks.py refac 2026-08-11 01:15:05 -06:00
terminals.py refac 2026-09-21 10:30:53 -04:00
tools.py refac 2026-09-21 08:31:27 -04:00
users.py refac 2026-09-07 14:46:52 -04:00
utils.py refac 2026-09-06 17:27:30 -04:00