From 87849b74b9b726dbaf1502c7a9c26fc064eb57f9 Mon Sep 17 00:00:00 2001 From: user <70670632+stuxf@users.noreply.github.com> Date: Thu, 30 Apr 2026 14:03:54 -0700 Subject: [PATCH] test(gemini): cover decoded delete file names --- .../files/test_gemini_files_transformation.py | 13 +++++++++++++ 1 file changed, 13 insertions(+) diff --git a/tests/test_litellm/llms/gemini/files/test_gemini_files_transformation.py b/tests/test_litellm/llms/gemini/files/test_gemini_files_transformation.py index 334c691fdba..88010d01459 100644 --- a/tests/test_litellm/llms/gemini/files/test_gemini_files_transformation.py +++ b/tests/test_litellm/llms/gemini/files/test_gemini_files_transformation.py @@ -398,3 +398,16 @@ class TestGoogleAIStudioFilesTransformation: optional_params={}, litellm_params=litellm_params, ) + + def test_transform_delete_file_request_rejects_deeply_encoded_traversal_url(self): + litellm_params = { + "api_key": "test-api-key", + "api_base": "https://generativelanguage.googleapis.com", + } + + with pytest.raises(ValueError, match="Invalid Gemini file name"): + self.handler.transform_delete_file_request( + file_id="https://generativelanguage.googleapis.com/v1beta/files/..%2525252Fsecrets", + optional_params={}, + litellm_params=litellm_params, + )