Skip to content

fix(provider): allow custom LLM HTTP hostnames (#929) - #935

Merged
H-Chris233 merged 2 commits into
Open-Less:betafrom
H-Chris233:codex/fix-929-http-domain-endpoint
Aug 9, 2026
Merged

fix(provider): allow custom LLM HTTP hostnames (#929)#935
H-Chris233 merged 2 commits into
Open-Less:betafrom
H-Chris233:codex/fix-929-http-domain-endpoint

Conversation

@H-Chris233

@H-Chris233 H-Chris233 commented Aug 9, 2026

Copy link
Copy Markdown
Collaborator

Summary

  • 完全放开 http(s) 端点限制:公网/私网/本地/元数据地址一律放行,校验仅保留 URL 格式检查(合法 http(s) URL + 主机名)。
  • LLM / ASR / Omni 三条路径(连通性测试、模型列表、运行时)共用同一校验。
  • 运行时 resolve_ark_endpoint 补上同一校验,修复「保存端点绕过验证按钮检查」gap。
  • 前端对 ark/asr/omni endpoint 的 http:// 输入展示明文风险提示(5 个 locale)。
  • Closes [provider] 自定义 LLM 拒绝带域名的 HTTP 局域网端点 #929

Validation

  • npm test — passed,43 frontend tests。
  • cargo test --lib endpoint_security::tests — passed。
  • cargo test --lib resolve_ark_endpoint -- --test-threads=1 — passed。
  • cargo test --lib asr_endpoint -- --test-threads=1 — passed。

@H-Chris233
H-Chris233 marked this pull request as ready for review August 9, 2026 06:23
- 完全放开 http(s) 端点限制:公网/私网/本地/元数据地址一律放行,
  校验仅保留 URL 格式检查(合法 http(s) URL + 主机名)
- LLM / ASR / Omni 三条路径(连通性测试、模型列表、运行时)共用同一校验
- 运行时 resolve_ark_endpoint 补上同一校验,修复「保存端点绕过验证按钮检查」gap
- 前端对 ark/asr/omni endpoint 的 http:// 输入展示明文风险提示(5 个 locale)
@H-Chris233
H-Chris233 force-pushed the codex/fix-929-http-domain-endpoint branch from f53c287 to d6896b7 Compare August 9, 2026 07:24
Remove the provider-specific HTTPS-only guard so explicitly configured valid HTTP endpoints follow the shared endpoint validation policy.
@H-Chris233
H-Chris233 merged commit a92ada4 into Open-Less:beta Aug 9, 2026
4 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

[provider] 自定义 LLM 拒绝带域名的 HTTP 局域网端点

1 participant