fix: scope param controls to credential fields, exclude routing params

This commit is contained in:
Yuneng Jiang 2026-04-22 15:15:56 -07:00
parent d2decfa599
commit bf30cc0e00
No known key found for this signature in database

View file

@ -159,14 +159,9 @@ def is_request_body_safe(
# and must not be overridable from user-supplied request bodies.
"vertex_credentials",
"vertex_ai_credentials",
"vertex_project",
"vertex_ai_project",
"vertex_location",
"vertex_ai_location",
"aws_access_key_id",
"aws_secret_access_key",
"aws_session_token",
"aws_region_name",
"aws_profile_name",
"aws_role_name",
"aws_sts_endpoint",