The SSRF protection in _fetch_page_text() rewrote URLs to use the resolved IP directly, which broke TLS SNI — servers rejected the handshake because SNI sent the IP instead of the hostname. Replace the URL-rewriting approach with custom HTTPSHandler/HTTPHandler classes that pin the resolved IP at the socket level while preserving the original hostname for correct SNI negotiation. Also add certifi as a dependency for reliable CA certificate resolution.
18 lines
281 B
Text
18 lines
281 B
Text
# Studio UI backend dependencies
|
|
typer
|
|
fastapi
|
|
uvicorn
|
|
pydantic
|
|
matplotlib
|
|
pandas
|
|
nest_asyncio
|
|
datasets==4.3.0
|
|
pyjwt
|
|
easydict
|
|
addict
|
|
# gradio>=4.0.0 # 148 MB - Studio uses React + FastAPI, not Gradio
|
|
huggingface-hub==0.36.2
|
|
structlog>=24.1.0
|
|
diceware
|
|
ddgs
|
|
certifi
|