old-actions/code-review
2
0
Fork 0
Code Pull Requests Actions Releases 2 Activity

feat(ai-review 對話收斂): 讀 PR review 留言判斷解決狀態並收斂 findings #45

Merged
admin merged 69 commits from develop into master 2026-06-23 08:30:28 +00:00
Conversation 1 Commits 69 Files Changed 29
+4 -4
1 changed files with 4 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files
Showing only changes of commit e73e18f2c3 - Show all commits
app/usage.js
+4 -4
View File
@@ -125,13 +125,13 @@ export function resetRateLimit() {
const stripSlash = (s) => String(s || '').replace(/\/$/, ''); const stripSlash = (s) => String(s || '').replace(/\/$/, '');
/** /**
* 以實際 hostname 精確比對是否為 OpenRouter，避免被偽造的 baseURL * 以實際 hostname 精確比對是否為 OpenRouter（僅接受 apex 域名 `openrouter.ai`），
* （如 `openrouter.ai.evil.com` 或 `evil.com/openrouter.ai`）矇騙而把 API key 送往惡意主機。 * 避免被偽造的 baseURL（如 `openrouter.ai.evil.com`、`evil.com/openrouter.ai` 或任何子網域）
* 矇騙而把 API key 送往非 OpenRouter 主機。
*/ */
function isOpenRouterBaseURL(baseURL) { function isOpenRouterBaseURL(baseURL) {
try { try {
const host = new URL(baseURL).hostname.toLowerCase(); return new URL(baseURL).hostname.toLowerCase() === 'openrouter.ai';
return host === 'openrouter.ai' || host.endsWith('.openrouter.ai');
} catch { } catch {
return false; return false;
} }