Dayuan Jiang 4ace31d412 fix: allow private URLs by default for reverse proxy setups (#600) ...

* fix: allow private URLs by default for reverse proxy setups

Fixes #588 - Users with reverse proxy setups (e.g., Antigravity tools)
were getting "Invalid base URL" errors due to SSRF protection blocking
private/internal URLs.

Changes:
- Add ALLOW_PRIVATE_URLS env var (defaults to true)
- Set to "false" to enable strict SSRF protection if needed

* refactor: extract isPrivateUrl to shared utility

2026-01-17 23:14:53 +09:00

..

chat

fix(chat): repair inconsistent quote escaping in edit_diagram JSON

2026-01-17 20:56:43 +09:00

config

feat: add bring-your-own-API-key support (#186)

2025-12-09 17:50:07 +09:00

log-feedback

fix: use full IP for userId to prevent quota collision (#400)

2025-12-25 12:20:46 +09:00

log-save

refactor: simplify Langfuse integration with AI SDK 6 (#375)

2025-12-23 16:26:45 +09:00

parse-url

fix: allow private URLs by default for reverse proxy setups (#600)

2026-01-17 23:14:53 +09:00

server-models

[Feature] Server-side multi-provider/model support (#583)

2026-01-16 00:58:22 +09:00

validate-model

fix: allow private URLs by default for reverse proxy setups (#600)

2026-01-17 23:14:53 +09:00

verify-access-code

feat: verify access code with server before saving (#128)

2025-12-07 00:21:59 +09:00