Classic298 3f1c52e018 fix: gate chat-file links by caller access + repair insert_chat_files db arg (#25054) ... insert_chat_files() stored any caller-supplied file_id with no ownership check, so a user could attach another user's file to their own chat and then read it through the shared-chat access path in has_access_to_file(). Filter file_ids to those the caller owns, is admin for, or can read. Also repairs an UnboundLocalError introduced in 260ead64d: the existing duplicate-check referenced `session` before it was assigned (db=session), so the function threw on every call and no chat_file rows were persisted.		2026-05-28 17:42:17 -05:00
..
data	refac: mv backend files to /open_webui dir	2024-09-04 16:54:48 +02:00
open_webui	fix: gate chat-file links by caller access + repair insert_chat_files db arg (#25054)	2026-05-28 17:42:17 -05:00
.dockerignore	fix: litellm config issue	2024-02-24 22:35:11 -08:00
.gitignore	refac	2024-09-06 04:59:20 +02:00
dev.sh	refac	2026-03-24 19:43:30 -05:00
requirements-min.txt	refac	2026-04-24 18:20:10 +09:00
requirements.txt	refactor(firecrawl): use v2 API directly (#23934)	2026-04-24 18:32:08 +09:00
start.sh	fix: default optional env vars used with bash ,, in start.sh (#24683)	2026-05-15 09:29:25 +09:00
start_windows.bat	refac	2026-04-24 15:40:02 +09:00