stacklok / toolhive / 22663233116

64%

Build Type

push

github

Committed by web-flow

Commit Message

Respect INSECURE_DISABLE_URL_VALIDATION in upstream auth HTTP client (#3981)

UserInfoConfig.Validate() and newHTTPClientForHost() did not check the
INSECURE_DISABLE_URL_VALIDATION env var, unlike the rest of the
networking validation code. This caused the embedded auth server to
reject non-localhost HTTP userinfo URLs and block requests to in-cluster
services on private IPs, even when the env var was explicitly set.

Run Details

7 of 7 new or added lines in 2 files covered. (100.0%)

2 existing lines in 1 file now uncovered.

46504 of 72793 relevant lines covered (63.89%)

76.7 hits per line