From f3554e5e92d6db294065efa22acff7e449709de5 Mon Sep 17 00:00:00 2001 From: Erich Beyer Date: Fri, 20 Mar 2026 20:24:41 -0700 Subject: [PATCH] fix: prevent .netrc credentials from being injected into api calls --- legendary/api/egs.py | 2 ++ 1 file changed, 2 insertions(+) diff --git a/legendary/api/egs.py b/legendary/api/egs.py index d38603d..f88707d 100644 --- a/legendary/api/egs.py +++ b/legendary/api/egs.py @@ -37,11 +37,13 @@ class EPCAPI: self.session = requests.session() self.session.headers['User-Agent'] = self._user_agent + self.session.auth = lambda r: r # increase maximum pool size for multithreaded metadata requests self.session.mount('https://', requests.adapters.HTTPAdapter(pool_maxsize=16)) self.unauth_session = requests.session() self.unauth_session.headers['User-Agent'] = self._user_agent + self.unauth_session.auth = lambda r: r self._oauth_basic = HTTPBasicAuth(self._user_basic, self._pw_basic)