scriptoriumadmin/litellm
1
0
Fork 0
mirror of https://github.com/BerriAI/litellm.git synced 2026-10-05 02:41:56 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 49

fix(proxy): block /ui/* static routes when DISABLE_ADMIN_UI=true

Browse source
This commit is contained in:
Ishaan Jaffer 2026-04-28 16:50:16 -07:00
parent 740bb44796
commit 203f493596
No known key found for this signature in database
1 changed files with 14 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

15
litellm/proxy/proxy_server.py
View file

@ -302,6 +302,7 @@ from litellm.proxy.common_utils.encrypt_decrypt_utils import (
decrypt_value_helper,
encrypt_value_helper,
)
from litellm.proxy.common_utils.admin_ui_utils import admin_ui_disabled
from litellm.proxy.common_utils.html_forms.ui_login import build_ui_login_form
from litellm.proxy.common_utils.http_parsing_utils import (
_read_request_body,
@ -1454,7 +1455,19 @@ try:
)
# print(f"mounted _next at {server_root_path}/ui/_next")
app.mount("/ui", StaticFiles(directory=ui_path, html=True), name="ui")
_disable_admin_ui = str_to_bool(os.getenv("DISABLE_ADMIN_UI", "false")) is True
if _disable_admin_ui:
@app.get("/ui/{path:path}")
async def ui_disabled_path(path: str):
return admin_ui_disabled()
@app.get("/ui")
async def ui_disabled_root():
return admin_ui_disabled()
else:
app.mount("/ui", StaticFiles(directory=ui_path, html=True), name="ui")
def _restructure_ui_html_files(ui_root: str) -> None:
"""Ensure each exported HTML route is available as <route>/index.html."""