Classic298 b78dabb442 fix: reject empty passwords in LDAP authentication to prevent unauthenticated binds (#23633) ... Per RFC 4513, a Simple Bind with a non-empty DN but empty password is unauthenticated simple authentication. Many LDAP servers (OpenLDAP default, some AD configs) accept these binds, allowing account takeover without valid credentials. Rejects empty and whitespace-only passwords before attempting the LDAP bind.		2026-04-12 16:33:57 -05:00
..
data	refac: mv backend files to /open_webui dir	2024-09-04 16:54:48 +02:00
open_webui	fix: reject empty passwords in LDAP authentication to prevent unauthenticated binds (#23633)	2026-04-12 16:33:57 -05:00
.dockerignore	fix: litellm config issue	2024-02-24 22:35:11 -08:00
.gitignore	refac	2024-09-06 04:59:20 +02:00
dev.sh	refac	2026-03-24 19:43:30 -05:00
requirements-min.txt	refac: async db	2026-04-12 14:22:11 -05:00
requirements.txt	refac: async db	2026-04-12 14:22:11 -05:00
start.sh	refac	2026-03-24 19:43:30 -05:00
start_windows.bat	refac	2026-03-24 19:43:30 -05:00