fix: prevent .netrc credentials from being injected into api calls (#736)

This commit is contained in:
badboybeyer 2026-04-08 03:49:43 -07:00 committed by GitHub
parent b23d351678
commit 9942cd987f
No known key found for this signature in database
GPG key ID: B5690EEEBB952194

View file

@ -37,11 +37,13 @@ class EPCAPI:
self.session = requests.session()
self.session.headers['User-Agent'] = self._user_agent
self.session.auth = lambda r: r
# increase maximum pool size for multithreaded metadata requests
self.session.mount('https://', requests.adapters.HTTPAdapter(pool_maxsize=16))
self.unauth_session = requests.session()
self.unauth_session.headers['User-Agent'] = self._user_agent
self.unauth_session.auth = lambda r: r
self._oauth_basic = HTTPBasicAuth(self._user_basic, self._pw_basic)