Cursor Agent 5923c3209b fix(security): prevent secret_fields from leaking into spend logs ... secret_fields (containing raw HTTP headers including Authorization Bearer tokens) was being included in proxy_server_request['body'] because the body snapshot was a copy.copy(data) of the full request dict. This body gets serialized and persisted in the LiteLLM_SpendLogs table, exposing user credentials in the database. Root cause: data['secret_fields'] was set before the body snapshot at data['proxy_server_request']['body'] = copy.copy(data), so the full raw headers (including auth tokens) ended up in the snapshot. Fix (defense in depth): 1. Exclude 'secret_fields' when creating the body snapshot in litellm_pre_call_utils.py (primary fix) 2. Strip 'secret_fields' in _sanitize_request_body_for_spend_logs_payload as a secondary safeguard secret_fields remains available on the live data dict for legitimate downstream consumers (MCP, Responses API). Co-authored-by: Krrish Dholakia <krrish-berri-2@users.noreply.github.com>		2026-05-05 02:01:41 +00:00
..
test_cloudzero_endpoints.py	style: run black formatter on files from main merge	2026-04-17 13:02:59 -07:00
test_spend_log_error_logger.py	feat(spend-logs): opt-in suppression of stack traces in spend-tracking error logs	2026-05-02 00:44:34 +00:00
test_spend_management_endpoints.py	Scope NULLS LAST to ttft_ms only	2026-04-24 22:52:04 -07:00
test_spend_query_optimization.py	fix(spend): session-TZ-independent date filtering for spend/error log queries	2026-04-10 17:04:52 -07:00
test_spend_tracking_utils.py	fix(security): prevent secret_fields from leaking into spend logs	2026-05-05 02:01:41 +00:00