mirror of
https://github.com/BerriAI/litellm.git
synced 2026-11-12 08:42:18 +00:00
155e4080c4
Three findings from review of the previous commit. max_messages applied the same number to two lists that count different things: texts is fragment-based (a multimodal turn contributes several entries, a tool-call-only turn contributes none) while structured_messages is message-based, so the two views of the payload could cover different parts of the conversation, sending text from an omitted turn or dropping text from a retained one. The message window is now the source of truth and the text window is the number of fragments those retained messages contain, counted with a role-agnostic helper so an unenumerated role cannot silently shrink it. /guardrails/apply_guardrail built request_data straight from the caller's metadata, so a caller could claim a user_api_key_alias or user_api_key_team_id that a guardrail exempts and get its text back unscanned. The authenticated identity is now layered on top of the caller's metadata via the same sanitizer the in-line path uses, so what authentication established wins. Caller metadata that is not identity still passes through untouched, and every guardrail on that route now sees the caller information it already sees in-line. The per_session dedup cache was keyed only on the caller-supplied session id, so whoever claimed an id first suppressed another tenant's entry for the same id. The key is now namespaced by the authenticated key hash, falling back to the team id. |
||
|---|---|---|
| .. | ||
| guardrail_hooks | ||
| test_content_filter_path_traversal.py | ||
| test_content_utils.py | ||
| test_custom_code_security.py | ||
| test_deferred_guardrail_logging.py | ||
| test_guardrail_coverage.py | ||
| test_guardrail_endpoints.py | ||
| test_guardrail_registry.py | ||
| test_init_guardrails.py | ||
| test_llm_as_a_judge.py | ||
| test_mcp_jwt_signer.py | ||
| test_pillar_guardrails.py | ||
| test_prompt_security_guardrails.py | ||
| test_qostodian_nexus_guardrail.py | ||
| test_usage_endpoints.py | ||