Merge branch 'main' into alert-autofix-27

Potential fix for code scanning alert no. 27: Incomplete URL substring sanitization
Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com>
2026-01-04 05:38:33 +00:00 · 2025-11-18 12:11:17 -05:00 · 2025-11-08 21:16:07 +08:00
1 changed files with 4 additions and 2 deletions
--- a/lib/crewai/src/crewai/llms/providers/azure/completion.py
+++ b/lib/crewai/src/crewai/llms/providers/azure/completion.py
@@ -4,7 +4,7 @@ import json
 import logging
 import os
 from typing import TYPE_CHECKING, Any
-
+from urllib.parse import urlparse
 from pydantic import BaseModel

 from crewai.utilities.agent_utils import is_context_length_exceeded
@@ -161,7 +161,9 @@ class AzureCompletion(BaseLLM):
        Returns:
            Validated and potentially corrected endpoint URL
        """
-        if "openai.azure.com" in endpoint and "/openai/deployments/" not in endpoint:
+        parsed_url = urlparse(endpoint)
+        hostname = parsed_url.hostname or ""
+        if (hostname == "openai.azure.com" or hostname.endswith(".openai.azure.com")) and "/openai/deployments/" not in endpoint:
            endpoint = endpoint.rstrip("/")

            if not endpoint.endswith("/openai/deployments"):
Author	SHA1	Message	Date
Greyson LaLonde	ef93f9f456	Merge branch 'main' into alert-autofix-27	2025-11-18 12:11:17 -05:00
Rip&Tear	e3a0cda16c	Potential fix for code scanning alert no. 27: Incomplete URL substring sanitization Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com>	2025-11-08 21:16:07 +08:00