GO-2025-4154: new-api is vulnerable to SSRF Bypass in one-api

helper

package

v0.11.2-patch.1 Latest Latest Go to latest Published: Mar 6, 2026 License: AGPL-3.0 Imports: 24 Imported by: 0

Details

Valid go.mod file
Redistributable license
Tagged version
Stable version
Learn more about best practices

Repository

github.com/QuantumNous/new-api

Links

Open Source Insights

Documentation ¶

Index ¶

Constants
func ClaudeChunkData(c *gin.Context, resp dto.ClaudeResponse, data string)
func ClaudeData(c *gin.Context, resp dto.ClaudeResponse) error
func ContainPriceOrRatio(modelName string) bool
func Done(c *gin.Context)
func FlushWriter(c *gin.Context) (err error)
func GenerateFinalUsageResponse(id string, createAt int64, model string, usage dto.Usage) *dto.ChatCompletionsStreamResponse
func GenerateStartEmptyResponse(id string, createAt int64, model string, systemFingerprint *string) *dto.ChatCompletionsStreamResponse
func GenerateStopResponse(id string, createAt int64, model string, finishReason string) *dto.ChatCompletionsStreamResponse
func GetAndValidAudioRequest(c *gin.Context, relayMode int) (*dto.AudioRequest, error)
func GetAndValidOpenAIImageRequest(c *gin.Context, relayMode int) (*dto.ImageRequest, error)
func GetAndValidateClaudeRequest(c *gin.Context) (textRequest *dto.ClaudeRequest, err error)
func GetAndValidateEmbeddingRequest(c *gin.Context, relayMode int) (*dto.EmbeddingRequest, error)
func GetAndValidateGeminiBatchEmbeddingRequest(c *gin.Context) (*dto.GeminiBatchEmbeddingRequest, error)
func GetAndValidateGeminiEmbeddingRequest(c *gin.Context) (*dto.GeminiEmbeddingRequest, error)
func GetAndValidateGeminiRequest(c *gin.Context) (*dto.GeminiChatRequest, error)
func GetAndValidateRequest(c *gin.Context, format types.RelayFormat) (request dto.Request, err error)
func GetAndValidateRerankRequest(c *gin.Context) (*dto.RerankRequest, error)
func GetAndValidateResponsesCompactionRequest(c *gin.Context) (*dto.OpenAIResponsesCompactionRequest, error)
func GetAndValidateResponsesRequest(c *gin.Context) (*dto.OpenAIResponsesRequest, error)
func GetAndValidateTextRequest(c *gin.Context, relayMode int) (*dto.GeneralOpenAIRequest, error)
func GetLocalRealtimeID(c *gin.Context) string
func GetResponseID(c *gin.Context) string
func HandleGroupRatio(ctx *gin.Context, relayInfo *relaycommon.RelayInfo) types.GroupRatioInfo
func ModelMappedHelper(c *gin.Context, info *common.RelayInfo, request dto.Request) error
func ModelPriceHelper(c *gin.Context, info *relaycommon.RelayInfo, promptTokens int, ...) (types.PriceData, error)
func ModelPriceHelperPerCall(c *gin.Context, info *relaycommon.RelayInfo) (types.PriceData, error)
func ObjectData(c *gin.Context, object interface{}) error
func PingData(c *gin.Context) error
func ResponseChunkData(c *gin.Context, resp dto.ResponsesStreamResponse, data string)
func SetEventStreamHeaders(c *gin.Context)
func StreamScannerHandler(c *gin.Context, resp *http.Response, info *relaycommon.RelayInfo, ...)
func StringData(c *gin.Context, str string) error
func WssError(c *gin.Context, ws *websocket.Conn, openaiError types.OpenAIError)
func WssObject(c *gin.Context, ws *websocket.Conn, object interface{}) error
func WssString(c *gin.Context, ws *websocket.Conn, str string) error

Constants ¶

View Source

const (
	InitialScannerBufferSize    = 64 << 10 // 64KB (64*1024)
	DefaultMaxScannerBufferSize = 64 << 20 // 64MB (64*1024*1024) default SSE buffer size
	DefaultPingInterval         = 10 * time.Second
)

Variables ¶

This section is empty.

Functions ¶

func ClaudeChunkData ¶

func ClaudeChunkData(c *gin.Context, resp dto.ClaudeResponse, data string)

func ClaudeData ¶

func ClaudeData(c *gin.Context, resp dto.ClaudeResponse) error

func ContainPriceOrRatio ¶

func ContainPriceOrRatio(modelName string) bool

func Done ¶

func Done(c *gin.Context)

func FlushWriter ¶

func FlushWriter(c *gin.Context) (err error)

func GenerateFinalUsageResponse ¶

func GenerateFinalUsageResponse(id string, createAt int64, model string, usage dto.Usage) *dto.ChatCompletionsStreamResponse

func GenerateStartEmptyResponse ¶

func GenerateStartEmptyResponse(id string, createAt int64, model string, systemFingerprint *string) *dto.ChatCompletionsStreamResponse

func GenerateStopResponse ¶

func GenerateStopResponse(id string, createAt int64, model string, finishReason string) *dto.ChatCompletionsStreamResponse

func GetAndValidAudioRequest ¶

func GetAndValidAudioRequest(c *gin.Context, relayMode int) (*dto.AudioRequest, error)

func GetAndValidOpenAIImageRequest ¶

func GetAndValidOpenAIImageRequest(c *gin.Context, relayMode int) (*dto.ImageRequest, error)

func GetAndValidateClaudeRequest ¶

func GetAndValidateClaudeRequest(c *gin.Context) (textRequest *dto.ClaudeRequest, err error)

func GetAndValidateEmbeddingRequest ¶

func GetAndValidateEmbeddingRequest(c *gin.Context, relayMode int) (*dto.EmbeddingRequest, error)

func GetAndValidateGeminiBatchEmbeddingRequest ¶

func GetAndValidateGeminiBatchEmbeddingRequest(c *gin.Context) (*dto.GeminiBatchEmbeddingRequest, error)

func GetAndValidateGeminiEmbeddingRequest ¶

func GetAndValidateGeminiEmbeddingRequest(c *gin.Context) (*dto.GeminiEmbeddingRequest, error)

func GetAndValidateGeminiRequest ¶

func GetAndValidateGeminiRequest(c *gin.Context) (*dto.GeminiChatRequest, error)

func GetAndValidateRequest ¶

func GetAndValidateRequest(c *gin.Context, format types.RelayFormat) (request dto.Request, err error)

func GetAndValidateRerankRequest ¶

func GetAndValidateRerankRequest(c *gin.Context) (*dto.RerankRequest, error)

func GetAndValidateResponsesCompactionRequest ¶

func GetAndValidateResponsesCompactionRequest(c *gin.Context) (*dto.OpenAIResponsesCompactionRequest, error)

func GetAndValidateResponsesRequest ¶

func GetAndValidateResponsesRequest(c *gin.Context) (*dto.OpenAIResponsesRequest, error)

func GetAndValidateTextRequest ¶

func GetAndValidateTextRequest(c *gin.Context, relayMode int) (*dto.GeneralOpenAIRequest, error)

func GetLocalRealtimeID ¶

func GetLocalRealtimeID(c *gin.Context) string

func GetResponseID ¶

func GetResponseID(c *gin.Context) string

func HandleGroupRatio ¶

func HandleGroupRatio(ctx *gin.Context, relayInfo *relaycommon.RelayInfo) types.GroupRatioInfo

HandleGroupRatio checks for "auto_group" in the context and updates the group ratio and relayInfo.UsingGroup if present

func ModelMappedHelper ¶

func ModelMappedHelper(c *gin.Context, info *common.RelayInfo, request dto.Request) error

func ModelPriceHelper ¶

func ModelPriceHelper(c *gin.Context, info *relaycommon.RelayInfo, promptTokens int, meta *types.TokenCountMeta) (types.PriceData, error)

func ModelPriceHelperPerCall ¶

func ModelPriceHelperPerCall(c *gin.Context, info *relaycommon.RelayInfo) (types.PriceData, error)

ModelPriceHelperPerCall 按次计费的 PriceHelper (MJ、Task)

func ObjectData ¶

func ObjectData(c *gin.Context, object interface{}) error

func PingData ¶

func PingData(c *gin.Context) error

func ResponseChunkData ¶

func ResponseChunkData(c *gin.Context, resp dto.ResponsesStreamResponse, data string)

func SetEventStreamHeaders ¶

func SetEventStreamHeaders(c *gin.Context)

func StreamScannerHandler ¶

func StreamScannerHandler(c *gin.Context, resp *http.Response, info *relaycommon.RelayInfo, dataHandler func(data string) bool)

func StringData ¶

func StringData(c *gin.Context, str string) error

func WssError ¶

func WssError(c *gin.Context, ws *websocket.Conn, openaiError types.OpenAIError)

func WssObject ¶

func WssObject(c *gin.Context, ws *websocket.Conn, object interface{}) error

func WssString ¶

func WssString(c *gin.Context, ws *websocket.Conn, str string) error

Types ¶

This section is empty.

Source Files ¶

View all Source files

?	: This menu
/	: Search site
f or F	: Jump to
y or Y	: Canonical URL