mirror of
https://github.com/BerriAI/litellm.git
synced 2026-10-11 03:38:38 +00:00
9aa73ad92d
Close the DNS-rebinding TOCTOU by resolving and validating each candidate URL once, then pinning reqwest to exactly that validated SocketAddr set via a per-request resolver; every redirect hop is revalidated and repinned, so a connection can never use an unvalidated second DNS answer. Data-minimize public SSRF errors to a generic message with no URL, host, or query. Add a dedicated status-aware RustOcrInputError so only genuine client-input rejections map to BadRequestError; unrelated internal ValueError stays a server error. Co-Authored-By: Ishaan Jaffer <155045088+ishaan-berri@users.noreply.github.com> |
||
|---|---|---|
| .. | ||
| budgets | ||
| gateway | ||
| llm_translation | ||
| spend_tracking | ||
| conftest.py | ||
| e2e_config.py | ||
| e2e_gateway.py | ||
| e2e_http.py | ||
| lifecycle.py | ||
| models.py | ||
| pytest.ini | ||
| test_lifecycle.py | ||
| transport.py | ||