Yuneng Jiang 06a0d4498a fix: tighten handling of environment references in request parameters ...

- Reject os.environ/ references supplied via /health/test_connection
  request params instead of resolving them; config-sourced values are
  already resolved before reaching the endpoint.
- Skip os.environ/ references in dynamic callback params loaded from
  per-request metadata.
- Constrain oidc/file/ to an allowed credential directory allowlist
  (defaults to /var/run/secrets and /run/secrets, overridable via
  LITELLM_OIDC_ALLOWED_CREDENTIAL_DIRS).

2026-04-11 21:41:41 -07:00

..

my-website

fix: tighten handling of environment references in request parameters

2026-04-11 21:41:41 -07:00