fix(missingModelDownload): validate mirror URL and localize setting name

- Validate mirror is an absolute http(s) URL; warn and skip otherwise.

Author: xingchen-mu

src/locales/en/settings.json

@@ -230,6 +230,10 @@
       "title": "title"
     }
   },
+  "Comfy_ModelLibrary_HuggingFaceMirror": {
+    "name": "HuggingFace mirror URL",
+    "tooltip": "Optional mirror for Hugging Face model downloads. Leave empty to use the official huggingface.co (e.g. https://hf-mirror.com). Applies to the \"Download All missing models\" workflow button and the file-size probe shown in the UI."
+  },
   "Comfy_Node_AllowImageSizeDraw": {
     "name": "Show width × height below the image preview"
   },

src/platform/missingModel/missingModelDownload.test.ts

@@ -770,6 +770,24 @@ describe('resolveHuggingFaceUrl', () => {
     ).toBe('https://hf-mirror.com/org/model/resolve/main/x')
   })
 
+  it('ignores a mirror without a scheme', () => {
+    mockHuggingFaceMirror.value = 'hf-mirror.com'
+    const consoleWarn = vi.spyOn(console, 'warn').mockImplementation(() => {})
+    expect(
+      resolveHuggingFaceUrl('https://huggingface.co/org/model/resolve/main/x')
+    ).toBe('https://huggingface.co/org/model/resolve/main/x')
+    expect(consoleWarn).toHaveBeenCalled()
+  })
+
+  it('ignores a mirror with a non-http(s) scheme', () => {
+    mockHuggingFaceMirror.value = 'javascript:alert(1)'
+    const consoleWarn = vi.spyOn(console, 'warn').mockImplementation(() => {})
+    expect(
+      resolveHuggingFaceUrl('https://huggingface.co/org/model/resolve/main/x')
+    ).toBe('https://huggingface.co/org/model/resolve/main/x')
+    expect(consoleWarn).toHaveBeenCalled()
+  })
+
   it('leaves non-HuggingFace URLs untouched', () => {
     mockHuggingFaceMirror.value = 'https://hf-mirror.com'
     expect(

src/platform/missingModel/missingModelDownload.ts

@@ -46,6 +46,8 @@ export const HUGGINGFACE_MIRROR_SETTING_ID =
  * users behind networks blocking `huggingface.co` can still use the
  * "Download All missing models" button. Empty/missing setting returns
  * the URL unchanged. Non-HuggingFace URLs are returned unchanged.
+ * Mirrors that are not absolute http(s) URLs are ignored and warned
+ * about, to avoid producing broken download URLs.
  */
 export function resolveHuggingFaceUrl(url: string): string {
   const mirror = useSettingStore()
@@ -54,7 +56,21 @@ export function resolveHuggingFaceUrl(url: string): string {
     .replace(/\/+$/, '')
   if (!mirror) return url
   if (!hasHuggingFaceHost(url)) return url
-  return url.replace('https://huggingface.co', mirror)
+  try {
+    const parsed = new URL(mirror)
+    if (parsed.protocol !== 'http:' && parsed.protocol !== 'https:') {
+      console.warn(
+        `[missingModelDownload] Ignoring ${HUGGINGFACE_MIRROR_SETTING_ID}: mirror must use http or https, got ${parsed.protocol}`
+      )
+      return url
+    }
+    return url.replace('https://huggingface.co', mirror)
+  } catch {
+    console.warn(
+      `[missingModelDownload] Ignoring ${HUGGINGFACE_MIRROR_SETTING_ID}: mirror is not a valid URL`
+    )
+    return url
+  }
 }
 
 export interface ModelWithUrl {