feat: 31 new tests, metrics LLM counters, Dockerfile caching, Makefile targets, compose limits, code fixes
This commit is contained in:
@@ -122,7 +122,8 @@ def parse_package_path(path: str) -> tuple[str, str]:
|
||||
async def download_asset(download_url: str, dest_dir: str) -> str | None:
|
||||
"""Download an asset from Nexus using async httpx."""
|
||||
if not _validate_download_url(download_url):
|
||||
log.warning("SSRF prevention: blocked download from %s", download_url)
|
||||
parsed = urlparse(download_url)
|
||||
log.warning("SSRF prevention: blocked download from %s", parsed.hostname or "unknown")
|
||||
return None
|
||||
|
||||
dest_path = os.path.join(dest_dir, os.path.basename(download_url.split("?")[0]))
|
||||
|
||||
Reference in New Issue
Block a user