Latest Version Supported Python Versions Supported Implementations

requests-hardened is a library that overrides the default behaviors of the requests library, and adds new security features.

Installation

The project is available on PyPI:

pip install requests-hardened

Features

  • SSRF Filters: blocks private and loopback IP ranges.

  • HTTP Redirects: can be used safely alongside the SSRF filter feature.

  • Proxy Support: proxies can be used in combination with SSRF Filters for a defense in depth.

  • Handy Overrides of Defaults: allows to enforce secure defaults globally, such as to mitigate DoS attacks.

Overrides of Defaults

This library allows to override some default values from the requests library that can have a security impact:

  • Config.never_redirect = False always reject HTTP redirects

  • Config.default_timeout = (2, 10) sets the default timeout value when no value or None is passed

  • Config.user_agent_override = None optional config to override User-Agent header. When set to None, requests library will set its default user-agent.

SSRF Filters

A SSRF IP filter can be used to reject HTTP(S) requests targeting private and loopback IP addresses.

Settings:

  • Config.ip_filter_enable whether or not to filter the IP addresses

  • ip_filter_allow_loopback_ips whether or not to allow loopback IP addresses

Proxy Support

The SSRF IP filter’s behavior with proxies are as follows:

  • Proxy’s IP Address: does not block private and loopback IP addresses (no filtering). Instead, the filter assumes that the proxy URL is never tainted with untrusted user input.

  • Target IP Address (Tunneled HTTP Requests): by default, the tunneled requests are filtered for potential SSRF attacks.

  • Protocols Supported: SOCKS4, SOCKS5, HTTP, and HTTPS proxy server protocols are supported.

Example Usage:

from requests_hardened import Config, Manager

http_manager = Manager(
    Config(
        default_timeout=(2, 10),
        never_redirect=False,
        # Enable SSRF IP filter
        ip_filter_enable=True,
        ip_filter_allow_loopback_ips=False,
    )
)

# List of proxies
proxies = {
  "https": "socks5://127.0.0.1:8888",
  "http": "socks5://127.0.0.1:8888",
}

# Sends the HTTP request using the proxy
resp = http_manager.send_request("GET", "https://example.com", proxies=proxies)
print(resp)

Full Example

from requests_hardened import Config, Manager

# Creates a global "manager" that can be used to create ``requests.Session``
# objects with hardening in place.
http_manager = Manager(
    Config(
        default_timeout=(2, 10),
        never_redirect=False,
        ip_filter_enable=True,
        ip_filter_allow_loopback_ips=False,
        user_agent_override=None
    )
)

# Sends an HTTP request without re-using ``requests.Session``:
resp = http_manager.send_request("GET", "https://example.com")
print(resp)

# Sends HTTP requests with reusable ``requests.Session``:
with http_manager.get_session() as sess:
    sess.request("GET", "https://example.com")
    sess.request("POST", "https://example.com", json={"foo": "bar"})

Project links

Data verified by PyPI on Jul 14, 2026
Data provided by the project maintainers, verified at the time the release was uploaded to PyPI.

Key dates

PyPI data
Data sourced directly from PyPI's database.
  • Released:
Latest release

1 maintainer

PyPI data
Data sourced directly from PyPI's database.
Avatar for NyanKiyoshi from gravatar.com NyanKiyoshi

Credits

Author: Saleor Commerce

GitHub Statistics

Data verified by PyPI on Jul 14, 2026
The GitHub source repository was provided by the project maintainers and verified by PyPI at the time of upload. Stars, forks, and open issues/PRs are derived from that repository and have not been independently verified.

License expression

BSD-3-Clause
View SPDX License List

Requires

Python >=3.10

Classifiers

Report project as malware

Download files

Download the file for your platform. If you're not sure which to choose, learn more about installing packages.

Source Distribution

requests_hardened-1.3.0.tar.gz (7.5 kB view details)

Uploaded Source

Built Distribution

If you're not sure about the file name format, learn more about wheel file names.

requests_hardened-1.3.0-py3-none-any.whl (9.3 kB view details)

Uploaded Python 3

File details

Details for the file requests_hardened-1.3.0.tar.gz.

File metadata

  • Download URL: requests_hardened-1.3.0.tar.gz
  • Upload date:
  • Size: 7.5 kB
  • Tags: Source
  • Uploaded using Trusted Publishing? Yes
  • Uploaded via: twine/6.1.0 CPython/3.13.7

File hashes

Hashes for requests_hardened-1.3.0.tar.gz
Algorithm Hash digest
SHA256 9c1c7ade61354a175b24f4dd835997e4d2a9db8acf17b2f9ea2aca8b3643e0aa
MD5 c9909c38cae572e855050797afb8d4e4
BLAKE2b-256 4f90196175b8223e82d148b1bf9808c6292a4013982f91f82434d27d2bead47f

See more details on using hashes here.

Provenance

The following attestation bundles were made for requests_hardened-1.3.0.tar.gz:

Publisher: publish-pypi.yaml on saleor/requests-hardened

Attestations: Values shown here reflect the state when the release was signed and may no longer be current.

File details

Details for the file requests_hardened-1.3.0-py3-none-any.whl.

File metadata

File hashes

Hashes for requests_hardened-1.3.0-py3-none-any.whl
Algorithm Hash digest
SHA256 8eb300a66c8b81fe7562dc2910f4a58c72d8445e2db9d66eb25cb5bca3e5572d
MD5 ab9388a7feb6e56b9a8b645d354bae97
BLAKE2b-256 a0694f4f89777a107141239dc352d33c5bcf2a397fee5683d5059b6a263c0fb7

See more details on using hashes here.

Provenance

The following attestation bundles were made for requests_hardened-1.3.0-py3-none-any.whl:

Publisher: publish-pypi.yaml on saleor/requests-hardened

Attestations: Values shown here reflect the state when the release was signed and may no longer be current.

Supported by

AWS Cloud computing and Security Sponsor Datadog Monitoring Depot Continuous Integration Fastly CDN Google Download Analytics Pingdom Monitoring Sentry Error logging StatusPage Status page