mirror/ollama
1
0
Fork 0
mirror of https://github.com/ollama/ollama.git synced 2026-02-20 16:27:27 -05:00
Code Issues Packages Projects Releases Wiki Activity
5,087 Commits 355 Branches 434 Tags
8a257ec00a76d3dd90f0106fba1e56215588efae
Commit Graph

1 Commits

Author SHA1 Message Date
Bruce MacDonald
7601f0e93e server: reject unexpected auth hosts (#13738) 
Added validation to ensure auth redirects stay on the same host as the original request. The fix is a single check in getAuthorizationToken comparing the realm URL's host against the request host. Added tests for the auth flow.

Co-Authored-By: Gecko Security <188164982+geckosecurity@users.noreply.github.com>

* gofmt

---------

Co-authored-by: Gecko Security <188164982+geckosecurity@users.noreply.github.com>
 2026-01-16 14:10:36 -05:00