CaIon 5900426821 fix(task): restrict query redirect credentials to allowed hosts ...

Reuse the channel base host and plugin allowedHosts for redirected query
credentials. Keep anonymous redirects working, prevent credentials from
returning after an untrusted hop, and restrict body replay to trusted hosts.
Preserve SSRF and redirect limits, reject HTTPS downgrades, and redact signed
URLs from redirect-policy errors. Document the existing allowedHosts contract.

Validation: go test ./relay/channel/task/jsplugin -count=1
Passed against clean 6347fb0aa plus this patch, without an overlay.
Covers single/batch polling, 301/302/303/307/308, host and port boundaries,
multi-hop credentials, SSRF, downgrade rejection, and real HTTP receivers.

Related OWASP ASVS v5.0.0 controls: 14.2.3, 1.3.6, 12.3.1, 16.2.5.
https://github.com/OWASP/ASVS/tree/v5.0.0/5.0/en

2026-10-20 22:43:11 +08:00

..

channel

fix(task): restrict query redirect credentials to allowed hosts

2026-10-20 22:43:11 +08:00

common

fix(task): reprice each retry and reserve it before submission

2026-10-20 22:43:11 +08:00

common_handler

refactor: extract protocol conversion layer into standalone relaykit module (#6369)

2026-07-27 15:56:21 +08:00

constant

feat(deepseek): support V4.1 Flash, the Search and Fetch APIs, and @ reasoning modifiers (#7867)

2026-10-17 23:24:33 +08:00

helper

fix(task): reprice each retry and reserve it before submission

2026-10-20 22:43:11 +08:00

alpha_search_handler_test.go

fix(task): reprice each retry and reserve it before submission

2026-10-20 22:43:11 +08:00

alpha_search_handler.go

feat(relay): web search encoding per channel and vendor-reported search billing (#7690)

2026-10-07 23:29:24 +08:00

audio_handler.go

feat(i18n): translate web console messages in the frontend and AI-client errors in the backend (#7712)

2026-10-09 21:39:51 +08:00

chat_completions_via_responses_test.go

Add Responses WebSocket relay support (#5062)

2026-09-14 21:04:26 +08:00

chat_completions_via_responses.go

fix(relay): preserve Kimi K3 dynamic tool loading messages

2026-09-07 13:16:44 +08:00

claude_handler.go

feat(relay): explicit @ model modifiers and canonical billing identity

2026-09-04 20:45:52 +08:00

compatible_handler.go

feat(i18n): translate web console messages in the frontend and AI-client errors in the backend (#7712)

2026-10-09 21:39:51 +08:00

convert_request_error_test.go

fix(task): reprice each retry and reserve it before submission

2026-10-20 22:43:11 +08:00

convert_request_error.go

feat(relay): hosted-tool conversion fidelity, reasoning normalization, and billing usage integrity (#7137)

2026-09-01 21:53:35 +08:00

deepseek_tools_handler.go

feat(deepseek): support V4.1 Flash, the Search and Fetch APIs, and @ reasoning modifiers (#7867)

2026-10-17 23:24:33 +08:00

embedding_handler.go

refactor(relay): move replay metadata onto request bodies

2026-08-06 17:33:10 +08:00

gemini_handler.go

feat(i18n): translate web console messages in the frontend and AI-client errors in the backend (#7712)

2026-10-09 21:39:51 +08:00

image_handler.go

feat(i18n): translate web console messages in the frontend and AI-client errors in the backend (#7712)

2026-10-09 21:39:51 +08:00

mjproxy_handler.go

feat(channel): add a per-channel switch to skip upstream TLS verification

2026-10-10 14:02:06 +08:00

param_override_error.go

refactor: extract protocol conversion layer into standalone relaykit module (#6369)

2026-07-27 15:56:21 +08:00

plugin_protocol_test.go

feat(jsplugin): run task plugins on moejs

2026-09-30 17:24:19 +08:00

plugin_protocol.go

feat(jsplugin): run task plugins on moejs

2026-09-30 17:24:19 +08:00

relay_adaptor_jsplugin_test.go

feat(task): replace built-in task adaptors with a sandboxed JS plugin system (#7076)

2026-08-29 18:51:57 +08:00

relay_adaptor.go

feat(task): replace built-in task adaptors with a sandboxed JS plugin system (#7076)

2026-08-29 18:51:57 +08:00

relay_task_test.go

fix(task): reprice each retry and reserve it before submission

2026-10-20 22:43:11 +08:00

relay_task.go

fix(task): reprice each retry and reserve it before submission

2026-10-20 22:43:11 +08:00

request_billing.go

feat(i18n): translate web console messages in the frontend and AI-client errors in the backend (#7712)

2026-10-09 21:39:51 +08:00

request_clone_test.go

refactor: modernize Go code conventions

2026-09-08 20:55:03 +08:00

rerank_handler.go

refactor(relay): move replay metadata onto request bodies

2026-08-06 17:33:10 +08:00

response_model_test.go

feat(relay): web search encoding per channel and vendor-reported search billing (#7690)

2026-10-07 23:29:24 +08:00

responses_handler.go

feat(i18n): translate web console messages in the frontend and AI-client errors in the backend (#7712)

2026-10-09 21:39:51 +08:00

responses_request.go

Add Responses WebSocket relay support (#5062)

2026-09-14 21:04:26 +08:00

responses_websocket_test.go

fix(relay): send a close frame when a Responses WebSocket session ends

2026-10-11 17:10:53 +08:00

responses_websocket.go

fix(relay): mask only the custom upstream address in error messages (#7822)

2026-10-15 15:49:45 +08:00

task_platform_error_test.go

feat(task): replace built-in task adaptors with a sandboxed JS plugin system (#7076)

2026-08-29 18:51:57 +08:00

task_platform_test.go

feat(task): replace built-in task adaptors with a sandboxed JS plugin system (#7076)

2026-08-29 18:51:57 +08:00

websocket.go

feat(i18n): translate web console messages in the frontend and AI-client errors in the backend (#7712)

2026-10-09 21:39:51 +08:00