MindWorkAI/AI-Studio
1
0 Fork 0
mirror of https://github.com/MindWorkAI/AI-Studio.git synced 2026-10-06 23:29:40 +00:00
Code Issues Packages Projects Releases Wiki Activity

Changed private web pages and the Confluence search to require a High-confidence provider

Browse Source
This commit is contained in:
Thorsten Sommer committed 2026-09-23 16:31:21 +02:00
1 parent 56978d88f2
commit ad6b285c8d
11 files changed
+34 -51
Download Patch File Download Diff File Expand all files Collapse all files

No files matched your search

app/MindWork AI Studio/Tools/ToolCallingSystem/ToolCallingImplementations/ReadWebPageTool.cs
+3 -4
View File
@@ -73,7 +73,7 @@ public sealed class ReadWebPageTool(WebPageRetrievalService webPageRetrievalServ
{
TIMEOUT_SECONDS_SETTING => TB("(Optional) HTTP timeout for loading a web page in seconds."),
MAX_CONTENT_CHARACTERS_SETTING => TB("(Optional) Global truncation limit for extracted characters returned to the model."),
ALLOWED_PRIVATE_HOSTS_SETTING => TB("(Optional) Host allowlist for private or VPN web pages. For security reasons, private or VPN web pages aren't allowed to be read by default. Separate host patterns with commas, such as example.de, *.example.de. Allowed private hosts require a High-confidence provider or a provider trusted by your organization's configuration. For allowed HTTPS internal hosts, AI Studio also tries the operating system's default sign-in automatically when the server responds with integrated authentication."),
ALLOWED_PRIVATE_HOSTS_SETTING => TB("(Optional) Host allowlist for private or VPN web pages. For security reasons, private or VPN web pages aren't allowed to be read by default. Separate host patterns with commas, such as example.de, *.example.de. Allowed private hosts require a High-confidence provider. For allowed HTTPS internal hosts, AI Studio also tries the operating system's default sign-in automatically when the server responds with integrated authentication."),
_ => TB(fieldDefinition.Description),
};
@@ -144,7 +144,6 @@ public sealed class ReadWebPageTool(WebPageRetrievalService webPageRetrievalServ
{
TimeoutSeconds = timeoutSeconds,
ProviderConfidence = context.ProviderConfidence,
ProviderIsTrustedByConfiguration = context.ProviderIsTrustedByConfiguration,
UseOsSso = true,
IsPrivateHostAllowed = host => IsAllowedPrivateHost(host, allowedPrivateHosts),
OnPrivateHostProviderBlockAsync = this.ReportPrivateHostProviderBlockAsync,
@@ -275,13 +274,13 @@ public sealed class ReadWebPageTool(WebPageRetrievalService webPageRetrievalServ
private async Task ReportPrivateHostProviderBlockAsync(Uri url, ConfidenceLevel providerConfidence)
{
logger.LogWarning(
"Blocked read_web_page access to allowed private host '{Host}' because provider confidence '{ProviderConfidence}' is below HIGH and the provider is not trusted by configuration.",
"Blocked read_web_page access to allowed private host '{Host}' because provider confidence '{ProviderConfidence}' is below HIGH.",
url.Host,
providerConfidence);
await MessageBus.INSTANCE.SendError(new DataErrorMessage(
Icons.Material.Filled.Security,
TB("The web page was not loaded because private or VPN web pages require a High-confidence provider or a provider trusted by your organization's configuration.")));
TB("The web page was not loaded because private or VPN web pages require a High-confidence provider.")));
}
private static bool IsAllowedPrivateHost(string host, IReadOnlyList<AllowedPrivateHostPattern> allowedPrivateHosts)