mirror of
https://github.com/BerriAI/litellm.git
synced 2026-10-11 03:38:38 +00:00
9aa73ad92d
Close the DNS-rebinding TOCTOU by resolving and validating each candidate URL once, then pinning reqwest to exactly that validated SocketAddr set via a per-request resolver; every redirect hop is revalidated and repinned, so a connection can never use an unvalidated second DNS answer. Data-minimize public SSRF errors to a generic message with no URL, host, or query. Add a dedicated status-aware RustOcrInputError so only genuine client-input rejections map to BadRequestError; unrelated internal ValueError stays a server error. Co-Authored-By: Ishaan Jaffer <155045088+ishaan-berri@users.noreply.github.com> |
||
|---|---|---|
| .. | ||
| src | ||
| AGENTS.md | ||
| build.rs | ||
| Cargo.toml | ||
| CLAUDE.md | ||