2 Commits
Author SHA1 Message Date
seteiroandchengyongru 4490f8cfe4 fix(webui): allow media directory access when restrictToWorkspace is enabled
Add get_media_dir() as an extra allowed root in file_preview path resolution so uploaded images and documents remain previewable even with workspace restrictions on. Closes #5028
2026-07-24 00:30:49 +08:00
seteiroandXubin Ren c6a4d46a2a docs(security): recommend env-var references over plaintext API keys
Prefer ${VAR} env references in config over plaintext keys on disk. Closes #4803
2026-07-22 01:45:28 +08:00