mirror of
https://github.com/open-webui/open-webui.git
synced 2026-09-22 00:31:30 +00:00
- Remove image/svg+xml from safe inline allowlist since SVGs can execute JavaScript via script tags and event handlers when served as direct document responses - Strip MIME parameters (e.g. charset) before allowlist comparison and normalize to lowercase for consistency - Remove dead duplicate variable assignments - Collapse redundant elif/else branches into single else |
||
|---|---|---|
| .. | ||
| data | ||
| internal | ||
| migrations | ||
| models | ||
| retrieval | ||
| routers | ||
| socket | ||
| static | ||
| storage | ||
| test | ||
| tools | ||
| utils | ||
| __init__.py | ||
| alembic.ini | ||
| config.py | ||
| constants.py | ||
| env.py | ||
| functions.py | ||
| main.py | ||
| tasks.py | ||