mirror of
https://github.com/danielmiessler/fabric.git
synced 2026-09-10 07:36:44 -04:00
f37c71f9f7
- Reject unsafe cross-platform storage names and traversal attempts. - Confine symlink targets within configured filesystem storage directories. - Require API keys for every non-loopback server binding. - Authenticate Ollama routes and securely forward configured credentials. - Validate chat pattern, context, and session names early. - Sanitize client errors to hide internal filesystem details. - Default REST server binding to loopback port 8080. - Add regression coverage for traversal, symlinks, and authentication. |
||
|---|---|---|
| .. | ||
| docs | ||
| auth.go | ||
| chat.go | ||
| chat_test.go | ||
| configuration.go | ||
| contexts.go | ||
| models.go | ||
| models_test.go | ||
| ollama.go | ||
| ollama_test.go | ||
| path_traversal_test.go | ||
| patterns.go | ||
| serve.go | ||
| sessions.go | ||
| storage.go | ||
| strategies.go | ||
| youtube.go | ||