mirror of
https://github.com/BerriAI/litellm.git
synced 2026-10-11 03:38:38 +00:00
0798a83d36
Both Greptile and veria-ai flagged these as auto-approving too much: Claude Code matches an allow rule's text up to its first wildcard with no host awareness, so "Bash(curl -sS -F question=*)" approves a curl to any destination, not just this proxy. A prompt-injected repo instruction could get a local file uploaded somewhere without the user ever seeing a permission prompt. lite autoroute up already prompts for genuinely new commands and lets a user persist their own approval once they've seen it, which is the safer place for that decision to live. Removes SHUNT_BASH_ALLOW_RULES and the settings.json permissions merge entirely; the static-token env merge that up already did is unaffected. |
||
|---|---|---|
| .. | ||
| cli | ||
| conftest.py | ||
| test_chat.py | ||
| test_client.py | ||
| test_credentials.py | ||
| test_http_client.py | ||
| test_http_commands.py | ||
| test_keys.py | ||
| test_model_groups.py | ||
| test_models.py | ||
| test_teams.py | ||
| test_users.py | ||