gongzhiyongandClaude Sonnet 4.6
60735de884
The LangGraph API server injects all x-* request headers into thread.config.configurable, which gets persisted and exposed via POST /threads/search. This leaked Azure-injected headers (x-forwarded-for, x-client-ip, x-arr-ssl, etc.) to any user. Adds a Hono middleware (http.app) that strips sensitive infrastructure headers at the HTTP layer before they reach the LangGraph API routes. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
15 lines
251 B
JSON
15 lines
251 B
JSON
{
|
|
"node_version": "20",
|
|
"graphs": {
|
|
"agent": "./src/agent/supervisor/index.ts:graph"
|
|
},
|
|
"ui": {
|
|
"agent": "./src/agent-uis/index.tsx"
|
|
},
|
|
"http": {
|
|
"app": "./src/agent/http.ts:app"
|
|
},
|
|
"env": ".env",
|
|
"dependencies": ["."]
|
|
}
|