Cursor AgentandKrrish Dholakia 5923c3209b fix(security): prevent secret_fields from leaking into spend logs ...

secret_fields (containing raw HTTP headers including Authorization
Bearer tokens) was being included in proxy_server_request['body']
because the body snapshot was a copy.copy(data) of the full request
dict. This body gets serialized and persisted in the LiteLLM_SpendLogs
table, exposing user credentials in the database.

Root cause: data['secret_fields'] was set before the body snapshot at
data['proxy_server_request']['body'] = copy.copy(data), so the full
raw headers (including auth tokens) ended up in the snapshot.

Fix (defense in depth):
1. Exclude 'secret_fields' when creating the body snapshot in
   litellm_pre_call_utils.py (primary fix)
2. Strip 'secret_fields' in _sanitize_request_body_for_spend_logs_payload
   as a secondary safeguard

secret_fields remains available on the live data dict for legitimate
downstream consumers (MCP, Responses API).

Co-authored-by: Krrish Dholakia <krrish-berri-2@users.noreply.github.com>

2026-05-05 02:01:41 +00:00

..

test_cloudzero_endpoints.py

style: run black formatter on files from main merge

2026-04-17 13:02:59 -07:00

test_spend_log_error_logger.py

feat(spend-logs): opt-in suppression of stack traces in spend-tracking error logs

2026-05-02 00:44:34 +00:00

test_spend_management_endpoints.py

Scope NULLS LAST to ttft_ms only

2026-04-24 22:52:04 -07:00

test_spend_query_optimization.py

fix(spend): session-TZ-independent date filtering for spend/error log queries

2026-04-10 17:04:52 -07:00

test_spend_tracking_utils.py

fix(security): prevent secret_fields from leaking into spend logs

2026-05-05 02:01:41 +00:00