Sameer KankuteandClaude Opus 4.6 8112fbf274 fix(proxy): sanitize user_id input and block dangerous env var keys ...

Add input validation to get_user_id_from_request (length limit, control char rejection) and a blocklist of dangerous environment variable keys in _load_environment_variables to prevent PATH/LD_PRELOAD/PYTHONPATH override via config.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

2026-03-27 20:38:36 +05:30

..

a2a_protocol

…

anthropic_interface

…

assistants

…

batch_completion

…

batches

Merge pull request #23957 from Sameerlite/litellm_vertex-cancel-batch

2026-03-20 23:32:50 +05:30

caching

Litellm ishaan march 20 (#24303)

2026-03-21 12:40:11 -07:00

completion_extras

fix: apply Black formatting to 6 files after main merge

2026-03-21 15:03:06 -07:00

containers

…

endpoints/speech/speech_to_completion_bridge

…

evals

…

experimental_mcp_client

…

files

…

fine_tuning

…

google_genai

…

images

…

integrations

feat(prometheus): include spend_logs_metadata in custom labels

2026-03-23 10:59:18 -07:00

interactions

…

litellm_core_utils

feat(proxy): add project_alias tracking through callback metadata pipeline

2026-03-23 10:44:17 -07:00

llms

fix(test): add request_data param to test mock + black formatting

2026-03-23 15:43:05 +01:00

ocr

…

passthrough

…

proxy

fix(proxy): sanitize user_id input and block dangerous env var keys

2026-03-27 20:38:36 +05:30

proxy_auth

…

rag

…

realtime_api

…

rerank_api

…

responses

Apply Black formatting to 11 files

2026-03-21 15:05:53 -07:00

router_strategy

…

router_utils

Apply Black formatting to 11 files

2026-03-21 15:05:53 -07:00

search

…

secret_managers

…

skills

…

types

feat(proxy): add project_alias tracking through callback metadata pipeline

2026-03-23 10:44:17 -07:00

vector_store_files

…

vector_stores

…

videos

[Staging] - Ishaan March 17th (#23903)

2026-03-18 15:09:01 -07:00

__init__.py

fix: make reasoning summary opt-in, fix missing injection path, narrow test exceptions

2026-03-21 11:36:26 -07:00

_lazy_imports_registry.py

…

_lazy_imports.py

…

_logging.py

fix: add key-name-based secret redaction to catch secrets in config dict dumps

2026-03-21 11:44:49 -07:00

_redis.py

…

_service_logger.py

…

_uuid.py

…

_version.py

…

anthropic_beta_headers_config.json

…

anthropic_beta_headers_manager.py

…

blog_posts.json

…

budget_manager.py

…

constants.py

Litellm ishaan march 20 (#24303)

2026-03-21 12:40:11 -07:00

cost_calculator.py

Ishaan - March 18th changes (#24056)

2026-03-19 10:20:35 -07:00

cost.json

…

exceptions.py

…

main.py

Merge branch 'main' into litellm_oss_staging_03_17_2026

2026-03-19 15:53:06 +05:30

model_prices_and_context_window_backup.json

Merge remote-tracking branch 'origin/main' into litellm_dev_sameer_16_march_week

2026-03-21 15:11:29 -07:00

mypy.ini

…

policy_templates_backup.json

…

provider_endpoints_support_backup.json

…

py.typed

…

router.py

Merge pull request #24110 from BerriAI/Sameerlite/model-level-affinity

2026-03-20 18:05:46 +05:30

scheduler.py

…

setup_wizard.py

[Staging] - Ishaan March 17th (#23903)

2026-03-18 15:09:01 -07:00

timeout.py

…

utils.py

Merge branch 'main' into litellm_dev_sameer_16_march_week

2026-03-22 00:29:38 +05:30