UniqAI/open-webui
1
0
Fork 0
mirror of https://github.com/open-webui/open-webui synced 2024-11-16 05:24:02 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity

Merge pull request #451 from goecho/main

Browse Source 
Fix bug: Header attributes (Host, Authorization, Origin, Referer) not sanitized.
This commit is contained in:
Timothy Jaeryang Baek 2024-01-11 03:57:38 -08:00 committed by GitHub
commit 5c5bde3b85
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 4 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

8
backend/apps/ollama/main.py
View File

@ -65,10 +65,10 @@ async def proxy(path: str, request: Request, user=Depends(get_current_user)):
else:
raise HTTPException(status_code=401, detail=ERROR_MESSAGES.ACCESS_PROHIBITED)
headers.pop("Host", None)
headers.pop("Authorization", None)
headers.pop("Origin", None)
headers.pop("Referer", None)
headers.pop("host", None)
headers.pop("authorization", None)
headers.pop("origin", None)
headers.pop("referer", None)
r = None