open-webui/backend/open_webui
Classic298 d3dde3609d
fix: audit log records new passwords in plain text (#31622)
With request auditing turned on, the audit log only masked fields named exactly "password". The new password from a password change, and passwords entered in admin settings such as YaCy or Jupyter, were written to the log as-is. Any field whose name ends in "password", in any letter case, is now replaced with asterisks.
2026-09-30 19:09:03 +04:00
..
data refac: mv backend files to /open_webui dir 2024-09-04 16:54:48 +02:00
internal refac: build the SQLite LIKE regex from wildcard-split segments (#30393) 2026-09-23 23:55:57 -04:00
migrations chore: format 2026-08-25 16:53:53 -04:00
models fix: automation still shows "Last run Never" after "Run now" (#31583) 2026-09-30 19:01:42 +04:00
retrieval fix: admins can still read and change other users' chats with ENABLE_ADMIN_CHAT_ACCESS off (#31416) 2026-09-28 01:51:59 +04:00
routers refac(hardening): apply the same safety checks to generated image downloads (#31623) 2026-09-30 19:08:48 +04:00
socket fix: apply the Channels permission to real-time channel messages (#31578) 2026-09-30 19:02:21 +04:00
static refac 2026-09-06 17:27:30 -04:00
storage fix: read S3 files with long non-ASCII names (#30418) 2026-09-23 23:30:55 -04:00
tools refac 2026-09-24 12:34:04 -04:00
utils fix: audit log records new passwords in plain text (#31622) 2026-09-30 19:09:03 +04:00
__init__.py refactor: use secrets module for generated secret key (#30441) 2026-09-23 23:36:26 -04:00
alembic.ini fix: Alembic CLI commands from failing 2025-08-15 04:17:47 -04:00
config.py feat: add a Tavily search depth setting (#31308) 2026-09-27 23:15:09 +04:00
constants.py fix: SSO login failures show the email/password error (#31629) 2026-09-30 19:07:49 +04:00
env.py perf: per-room channel delivery for the socket.io Redis manager (#28818) 2026-09-22 14:48:56 -04:00
events.py refac 2026-08-16 23:21:00 -07:00
functions.py fix: honor bypass_system_prompt on the pipe route (#28739) 2026-08-19 11:08:02 -07:00
main.py fix: approved tool results are lost and approved tools can run twice (#31502) 2026-09-28 07:59:20 +04:00
tasks.py refac 2026-09-21 08:59:39 -04:00