Skip to content
Merged
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension


Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 1 addition & 1 deletion pyproject.toml
Original file line number Diff line number Diff line change
@@ -1,6 +1,6 @@
[project]
name = "agentscope-runtime"
version = "1.1.3"
version = "1.1.4"
description = "A production-ready runtime framework for agent applications, providing secure sandboxed execution environments and scalable deployment solutions with multi-framework support."
readme = "README.md"
requires-python = ">=3.10"
Expand Down
2 changes: 1 addition & 1 deletion src/agentscope_runtime/adapters/agentscope/message.py
Original file line number Diff line number Diff line change
Expand Up @@ -265,7 +265,7 @@ def is_valid_block(obj):
)
else:
parsed_url = urlparse(value)
if parsed_url.scheme and parsed_url.netloc:
if parsed_url.scheme:
url_source = URLSource(type="url", url=value)
msg_content.append(
Comment on lines 266 to 270
Copy link

Copilot AI Apr 9, 2026

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

The URL detection for audio content now treats any parsed scheme as a URL. This will classify malformed/relative strings like 'http:example.com' (scheme='http', empty netloc) as a URL and can also allow unexpected schemes (e.g., 'javascript:'), which may be unsafe or break downstream consumers expecting http(s) URLs. Consider validating against an allowlist of schemes (e.g., http/https, possibly file if intended) and requiring a netloc for network schemes (or otherwise using a more robust URL validation).

Copilot uses AI. Check for mistakes.
Comment thread
rayrayraykk marked this conversation as resolved.
block_cls(type=cnt_type, source=url_source),
Expand Down
2 changes: 1 addition & 1 deletion src/agentscope_runtime/version.py
Original file line number Diff line number Diff line change
@@ -1,2 +1,2 @@
# -*- coding: utf-8 -*-
__version__ = "v1.1.3"
__version__ = "v1.1.4"
Loading