scriptoriumadmin

scriptoriumadmin synced commits to refs/pull/23454/head at scriptoriumadmin/open-webui from mirror 2026-04-13 00:30:26 +00:00

eced8fbaed Verify session ownership for local: chat IDs and URL-encode chat_id

18d56d4c41 Handle temporary (local:) chat IDs in scoped task endpoints

b42d132778 Add ownership checks to global task endpoints

f6b85700ea fix: gate OpenAI catch-all proxy behind ENABLE_OPENAI_API_PASSTHROUGH toggle (#23640)

d40f31982b refac

Compare 71 commits »

scriptoriumadmin synced commits to refs/pull/23455/merge at scriptoriumadmin/open-webui from mirror 2026-04-13 00:30:26 +00:00

4254c51bfa Merge eae3d576bb into 674c1127e2

674c1127e2 i18n: add pt-BR translations for newly added UI items and consistency pass (#23403)

15b89b9218 refac

008f1dfbda fix(ui): prevent user added action icons from being dragged (#23412)

47d413ce7b refac

Compare 30 commits »

scriptoriumadmin synced commits to refs/pull/23458/merge at scriptoriumadmin/open-webui from mirror 2026-04-13 00:30:26 +00:00

63ff754bd1 Merge 4f12b14e9a into b618d84065

b618d84065 fix: add missing read-access check on channel members endpoint (#23625)

15f9a8f3f1 refac

a2a9a3a42a fix: prevent path traversal via model name in Azure deployment URLs (#23629)

4498c21f4c fix: enforce model access control on Ollama generate, show, embed, embeddings endpoints (#23631)

Compare 15 commits »

scriptoriumadmin synced commits to refs/pull/23462/merge at scriptoriumadmin/open-webui from mirror 2026-04-13 00:30:26 +00:00

86786b8f5c Merge a367a8c7d7 into b618d84065

b618d84065 fix: add missing read-access check on channel members endpoint (#23625)

15f9a8f3f1 refac

a2a9a3a42a fix: prevent path traversal via model name in Azure deployment URLs (#23629)

4498c21f4c fix: enforce model access control on Ollama generate, show, embed, embeddings endpoints (#23631)

Compare 15 commits »

scriptoriumadmin synced commits to refs/pull/23509/merge at scriptoriumadmin/open-webui from mirror 2026-04-13 00:30:26 +00:00

a9fb348ea0 Merge ae24b51659 into 36a81ad43b

36a81ad43b refac

71a39dbac1 fix: filter on is_active in channel membership checks (#23623)

5eab125f13 fix: sanitize model description HTML with DOMPurify in chat placeholders (#23621)

e790e7be7a fix: enforce model access control on /responses endpoint (#23481)

Compare 14 commits »

scriptoriumadmin synced commits to refs/pull/23531/merge at scriptoriumadmin/open-webui from mirror 2026-04-13 00:30:26 +00:00

7627418bd8 Merge d26050081c into e790e7be7a

e790e7be7a fix: enforce model access control on /responses endpoint (#23481)

b0df527224 i18n: Update Japanese translation (#23617)

92dfa3f2f2 fix(backend): provide fallback strings for webhook UserNameResponse to prevent Pydantic validation error (#23414)

406251c2f3 enh: automation

Compare 15 commits »

scriptoriumadmin synced commits to refs/pull/23482/merge at scriptoriumadmin/open-webui from mirror 2026-04-13 00:30:26 +00:00

dd097b298e Merge 7cf0ed8021 into 36a81ad43b

36a81ad43b refac

71a39dbac1 fix: filter on is_active in channel membership checks (#23623)

5eab125f13 fix: sanitize model description HTML with DOMPurify in chat placeholders (#23621)

e790e7be7a fix: enforce model access control on /responses endpoint (#23481)

Compare 10 commits »

scriptoriumadmin synced commits to refs/pull/23489/merge at scriptoriumadmin/open-webui from mirror 2026-04-13 00:30:26 +00:00

da59e5585a Merge 296d8903fe into e790e7be7a

e790e7be7a fix: enforce model access control on /responses endpoint (#23481)

b0df527224 i18n: Update Japanese translation (#23617)

92dfa3f2f2 fix(backend): provide fallback strings for webhook UserNameResponse to prevent Pydantic validation error (#23414)

406251c2f3 enh: automation

Compare 15 commits »

scriptoriumadmin synced commits to refs/pull/23575/merge at scriptoriumadmin/open-webui from mirror 2026-04-13 00:30:26 +00:00

3ca30ac034 Merge 2882eee1f7 into e790e7be7a

e790e7be7a fix: enforce model access control on /responses endpoint (#23481)

b0df527224 i18n: Update Japanese translation (#23617)

92dfa3f2f2 fix(backend): provide fallback strings for webhook UserNameResponse to prevent Pydantic validation error (#23414)

406251c2f3 enh: automation

Compare 21 commits »

scriptoriumadmin synced commits to refs/pull/22762/merge at scriptoriumadmin/open-webui from mirror 2026-04-13 00:30:25 +00:00

c483c905da Merge 2ff86d8c5d into 36a81ad43b

36a81ad43b refac

71a39dbac1 fix: filter on is_active in channel membership checks (#23623)

5eab125f13 fix: sanitize model description HTML with DOMPurify in chat placeholders (#23621)

e790e7be7a fix: enforce model access control on /responses endpoint (#23481)

Compare 10 commits »

scriptoriumadmin synced commits to refs/pull/23370/merge at scriptoriumadmin/open-webui from mirror 2026-04-13 00:30:25 +00:00

188ace5abb Merge 2aa7328d14 into 4292358bd5

4292358bd5 feat: log provider errors to console for better insights (#23379)

67023037f8 fix: replace brittle profile_image_url allowlist with safe-scheme validation (#23389)

e7ff4768f8 fix: Add ownership checks to global task endpoints (#23454)

c47dd7b771 refac

Compare 43 commits »

scriptoriumadmin synced commits to refs/pull/23371/merge at scriptoriumadmin/open-webui from mirror 2026-04-13 00:30:25 +00:00

8bbeacc81a Merge b9952ec288 into d59b933bf2

d59b933bf2 fix: apply REDIS_KEY_PREFIX to tool_servers and terminal_servers cache keys (#23649)

a7d4c53f3a refac

25898116ea chore: format

4292358bd5 feat: log provider errors to console for better insights (#23379)

Compare 53 commits »

scriptoriumadmin synced commits to refs/pull/23379/head at scriptoriumadmin/open-webui from mirror 2026-04-13 00:30:25 +00:00

7ab0478f31 fix: wrap non-JSON SSE error responses in JSON so middleware handles them

7c527837f0 Update main.py

57d4c35a90 fix: log provider errors that were silently swallowed

f6b85700ea fix: gate OpenAI catch-all proxy behind ENABLE_OPENAI_API_PASSTHROUGH toggle (#23640)

d40f31982b refac

Compare 71 commits »

scriptoriumadmin synced commits to refs/pull/23382/merge at scriptoriumadmin/open-webui from mirror 2026-04-13 00:30:25 +00:00

37805d1333 Merge d93fe55ad1 into 92dfa3f2f2

92dfa3f2f2 fix(backend): provide fallback strings for webhook UserNameResponse to prevent Pydantic validation error (#23414)

406251c2f3 enh: automation

ee9db91df0 refac

09f6d7ba57 refac

Compare 5 commits »

scriptoriumadmin synced commits to refs/pull/23386/merge at scriptoriumadmin/open-webui from mirror 2026-04-13 00:30:25 +00:00

e73675303e Merge 4368cce6bf into e790e7be7a

e790e7be7a fix: enforce model access control on /responses endpoint (#23481)

b0df527224 i18n: Update Japanese translation (#23617)

92dfa3f2f2 fix(backend): provide fallback strings for webhook UserNameResponse to prevent Pydantic validation error (#23414)

406251c2f3 enh: automation

Compare 7 commits »

scriptoriumadmin synced commits to refs/pull/23388/head at scriptoriumadmin/open-webui from mirror 2026-04-13 00:30:25 +00:00

0c4b6973d6 revert: keep serialize_output synchronous

ece8312b7f perf: keep in-memory helpers sync to avoid coroutine overhead

7088b8817b chore: convert serialize_output helpers to async

64ff29df4d refactor(middleware): optimize fence-stripping O(n²) → O(n)

f6b85700ea fix: gate OpenAI catch-all proxy behind ENABLE_OPENAI_API_PASSTHROUGH toggle (#23640)

Compare 72 commits »

scriptoriumadmin synced commits to refs/pull/23318/head at scriptoriumadmin/open-webui from mirror 2026-04-13 00:30:25 +00:00

fc98000aa8 refac

21cc828132 refac

8172c7e3d5 refac

498ff8cdc3 refac

e10a00132e refac

Compare 43 commits »

scriptoriumadmin synced commits to refs/pull/23189/merge at scriptoriumadmin/open-webui from mirror 2026-04-13 00:30:25 +00:00

0561fb30d8 Merge 8768a909c0 into de27a12151

8768a909c0 fix: validate required image fields, narrow exception catch to preserve 500s for real bugs

5ac3930c98 fix: strict image source validation, catch all conversion errors as 400

93186ba02c Update main.py

4b9443b3f3 Update anthropic.py

Compare 24 commits »

scriptoriumadmin synced commits to refs/pull/23189/head at scriptoriumadmin/open-webui from mirror 2026-04-13 00:30:25 +00:00

8768a909c0 fix: validate required image fields, narrow exception catch to preserve 500s for real bugs

5ac3930c98 fix: strict image source validation, catch all conversion errors as 400

93186ba02c Update main.py

4b9443b3f3 Update anthropic.py

f6b85700ea fix: gate OpenAI catch-all proxy behind ENABLE_OPENAI_API_PASSTHROUGH toggle (#23640)

Compare 158 commits »

scriptoriumadmin synced commits to refs/pull/23187/merge at scriptoriumadmin/open-webui from mirror 2026-04-13 00:30:25 +00:00

cd0fe6b3f6 Merge ec093db090 into fc98000aa8

ec093db090 changelog

b0210f431c changelog

fc98000aa8 refac

21cc828132 refac

Compare 83 commits »