highperfocused/open-webui
1
0
Fork 0
mirror of https://github.com/open-webui/open-webui.git synced 2025-08-08 10:22:39 +02:00
Code Issues Packages Projects Releases Wiki Activity

Merge pull request #451 from goecho/main

Browse Source 
Fix bug: Header attributes (Host, Authorization, Origin, Referer) not sanitized.
This commit is contained in:
Timothy Jaeryang Baek
2024-01-11 03:57:38 -08:00
committed by GitHub
parent b1f29aacd8 74f91bc74d
commit 5c5bde3b85
1 changed files with 4 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files

8
backend/apps/ollama/main.py
View File

@@ -65,10 +65,10 @@ async def proxy(path: str, request: Request, user=Depends(get_current_user)):
else: else:
raise HTTPException(status_code=401, detail=ERROR_MESSAGES.ACCESS_PROHIBITED) raise HTTPException(status_code=401, detail=ERROR_MESSAGES.ACCESS_PROHIBITED)
headers.pop("Host", None) headers.pop("host", None)
headers.pop("Authorization", None) headers.pop("authorization", None)
headers.pop("Origin", None) headers.pop("origin", None)
headers.pop("Referer", None) headers.pop("referer", None)
r = None r = None