fix(openai): resolve CodeQL security warning for URL sanitization

This commit is contained in:
Qiang 2026-04-27 10:18:17 +08:00
parent f7ce292820
commit d14a9bffe7

View file

@ -155,8 +155,7 @@ export class OpenAiHandler extends BaseProvider implements SingleCompletionHandl
const isGrokXAI = this._isGrokXAI(this.options.openAiBaseUrl)
const isDeepSeekV4 =
deepseekReasoner &&
(this.options.openAiBaseUrl?.includes("deepseek.com") || modelId.includes("deepseek"))
deepseekReasoner && (this._isDeepSeek(this.options.openAiBaseUrl) || modelId.includes("deepseek"))
const requestOptions: any = {
model: modelId,
@ -243,8 +242,7 @@ export class OpenAiHandler extends BaseProvider implements SingleCompletionHandl
}
} else {
const isDeepSeekV4 =
deepseekReasoner &&
(this.options.openAiBaseUrl?.includes("deepseek.com") || modelId.includes("deepseek"))
deepseekReasoner && (this._isDeepSeek(this.options.openAiBaseUrl) || modelId.includes("deepseek"))
const requestOptions: any = {
model: modelId,
@ -561,6 +559,11 @@ export class OpenAiHandler extends BaseProvider implements SingleCompletionHandl
return urlHost.includes("x.ai")
}
private _isDeepSeek(baseUrl?: string): boolean {
const urlHost = this._getUrlHost(baseUrl)
return urlHost === "deepseek.com" || urlHost.endsWith(".deepseek.com")
}
protected _isAzureAiInference(baseUrl?: string): boolean {
const urlHost = this._getUrlHost(baseUrl)
return urlHost.endsWith(".services.ai.azure.com")