Classic298 cfd2888545 fix:image url validation and signout post (#24420) ... * refac(routers): reject external URLs in profile/model image handlers * refac(ui): centralize image URL validation in safeImageUrl helper * refac(auths): make signout POST-only * refac: gate external profile image redirect behind ENABLE_PROFILE_IMAGE_URL_FORWARDING Restore the 302 redirect for external http(s) profile image URLs in the user and model profile-image endpoints, but gate it behind a new ENABLE_PROFILE_IMAGE_URL_FORWARDING env flag (default: True). Existing deployments that rely on external profile image forwarding continue to work unchanged. Operators who want to suppress the redirect (to prevent client-side IP/UA/Referer leaks) can set the flag to False.		2026-05-09 07:33:31 +09:00
..
data	refac: mv backend files to /open_webui dir	2024-09-04 16:54:48 +02:00
open_webui	fix:image url validation and signout post (#24420)	2026-05-09 07:33:31 +09:00
.dockerignore	fix: litellm config issue	2024-02-24 22:35:11 -08:00
.gitignore	refac	2024-09-06 04:59:20 +02:00
dev.sh	refac	2026-03-24 19:43:30 -05:00
requirements-min.txt	refac	2026-04-24 18:20:10 +09:00
requirements.txt	refactor(firecrawl): use v2 API directly (#23934)	2026-04-24 18:32:08 +09:00
start.sh	refac	2026-03-24 19:43:30 -05:00
start_windows.bat	refac	2026-04-24 15:40:02 +09:00