new-api

mirror of https://github.com/QuantumNous/new-api.git synced 2026-09-03 13:01:00 +00:00

Files

T

CaIon 20399d3c8f fix: harden SSRF protection for unauthenticated and user-level endpoints

- Add ValidateURLWithFetchSetting check before fetching MJ image URLs
  in RelayMidjourneyImage (unauthenticated endpoint)
- Add ValidateURLWithFetchSetting check before fetching video URLs
  in VideoProxy (upstream-controlled URL)
- Enable ApplyIPFilterForDomain by default to prevent DNS rebinding
  bypass of SSRF protection
- Elevate FetchModels endpoint from AdminAuth to RootAuth
- Update frontend: mark domain IP filtering as recommended, update
  description and i18n translations (zh-CN/zh-TW/en/fr/ja/ru/vi)

2026-03-31 17:57:47 +08:00

config

fix: harden token search with pagination, rate limiting and input validation

2026-02-06 17:52:19 +08:00

console_setting

format: package name -> github.com/QuantumNous/new-api (#2017 )

2025-10-11 15:30:09 +08:00

model_setting

feat: enhance Claude request header handling with append functionality

2026-03-09 23:47:51 +08:00

operation_setting

fix: default codex and claude channel affinity templates to skip retry on failure