bf55e0cba4
The SSRF protection in _fetch_page_text() rewrote URLs to use the resolved IP directly, which broke TLS SNI — servers rejected the handshake because SNI sent the IP instead of the hostname. Replace the URL-rewriting approach with custom HTTPSHandler/HTTPHandler classes that pin the resolved IP at the socket level while preserving the original hostname for correct SNI negotiation. Also add certifi as a dependency for reliable CA certificate resolution. |
||
|---|---|---|
| .. | ||
| single-env | ||
| __init__.py | ||
| base.txt | ||
| extras-no-deps.txt | ||
| extras.txt | ||
| no-torch-runtime.txt | ||
| overrides.txt | ||
| studio.txt | ||
| triton-kernels.txt | ||