mirror of
https://github.com/BerriAI/litellm.git
synced 2026-10-11 03:38:38 +00:00
0798a83d36
Both Greptile and veria-ai flagged these as auto-approving too much: Claude Code matches an allow rule's text up to its first wildcard with no host awareness, so "Bash(curl -sS -F question=*)" approves a curl to any destination, not just this proxy. A prompt-injected repo instruction could get a local file uploaded somewhere without the user ever seeing a permission prompt. lite autoroute up already prompts for genuinely new commands and lets a user persist their own approval once they've seen it, which is the safer place for that decision to live. Removes SHUNT_BASH_ALLOW_RULES and the settings.json permissions merge entirely; the static-token env merge that up already did is unaffected. |
||
|---|---|---|
| .. | ||
| autoroute | ||
| __init__.py | ||
| test_agents.py | ||
| test_auth_commands.py | ||
| test_claude_settings.py | ||
| test_config_commands.py | ||
| test_credentials_commands.py | ||
| test_debug_commands.py | ||
| test_encryption_commands.py | ||
| test_global_options.py | ||
| test_keys_commands.py | ||
| test_model_groups_commands.py | ||
| test_models_commands.py | ||
| test_pi.py | ||
| test_pkce_login.py | ||
| test_up_commands.py | ||
| test_users_commands.py | ||