LocalAI

0 Fork 0

mirror of https://github.com/mudler/LocalAI.git synced 2026-09-22 14:14:54 -04:00

Files

T

Richard Palethorpe 66e3a06ce6 fix(auth): require validated header credentials for CSRF exemption (#12185 )

Track successful header authentication before allowing cross-site requests
to bypass CSRF checks. Arbitrary headers on unauthenticated servers and
cookie-authenticated requests no longer grant an exemption.

Share the production CSRF middleware with multipart tests, add regression
coverage for credential sources, and document the exemption behavior.

Assisted-by: Codex:gpt-6 golangci-lint

Signed-off-by: Richard Palethorpe <io@richiejp.com>

2026-09-22 04:35:09 +01:00

application

fix(distributed): exclude pinned models from cluster eviction and idle scale-down

2026-09-11 23:08:26 +00:00

backend

feat(kimodocpp): track usage through generic backend metadata (#12162 )

2026-09-20 19:39:06 +01:00

cli

feat(gallery): galleries published as OCI artifacts (#12167 )

2026-09-21 09:23:05 +02:00

clients

security(http): refuse redirects on outbound clients via hardened pkg/httpclient (#10087 )