mirrors/hermes-agent
1
0
Fork 0
mirror of https://github.com/NousResearch/hermes-agent.git synced 2026-07-17 14:42:06 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 6

fix(security): cover remaining catalog credential paths

Browse source
This commit is contained in:
kshitijk4poor 2026-07-11 11:47:21 +05:30 • committed by kshitij
parent 27a1042b13
commit cf34a1e8c7
3 changed files with 48 additions and 6 deletions
Download patch file Download diff file Expand all files Collapse all files

9
hermes_cli/urllib_security.py
View file

@ -18,14 +18,13 @@ def url_origin(url: str) -> tuple[str, str, int | None]:
"""Return a normalized (scheme, hostname, effective port) origin."""
parsed = urllib.parse.urlparse(url)
scheme = (parsed.scheme or "").lower()
try:
port = parsed.port
except ValueError:
port = None
# Accessing ``parsed.port`` validates malformed/non-numeric ports. Let the
# ValueError fail the request closed instead of collapsing it to a default.
port = parsed.port
return (
scheme,
(parsed.hostname or "").lower().rstrip("."),
port or _DEFAULT_PORTS.get(scheme),
port if port is not None else _DEFAULT_PORTS.get(scheme),
)