From 4438f69aac46806c631866489a26b644488a784e Mon Sep 17 00:00:00 2001 From: Frank Date: Tue, 21 Jul 2026 14:51:41 -0400 Subject: [PATCH] zen: add security check --- packages/console/app/src/routes/zen/util/handler.ts | 6 +++++- 1 file changed, 5 insertions(+), 1 deletion(-) diff --git a/packages/console/app/src/routes/zen/util/handler.ts b/packages/console/app/src/routes/zen/util/handler.ts index 093c14ae26..a175ff4d0e 100644 --- a/packages/console/app/src/routes/zen/util/handler.ts +++ b/packages/console/app/src/routes/zen/util/handler.ts @@ -775,7 +775,11 @@ export async function handler( ) if (!data) throw new AuthError(t("zen.api.error.invalidApiKey")) - if (data.workspace.isBlocked || data.workspace.isFlaggedByAnthropic || data.workspace.isFlaggedByOpenAI) + if ( + data.workspace.isBlocked || + (data.workspace.isFlaggedByAnthropic && modelInfo.id.startsWith("claude-")) || + (data.workspace.isFlaggedByOpenAI && modelInfo.id.startsWith("gpt-")) + ) throw new AuthError(t("zen.api.error.requestBlockedByUpstreamProvider")) if ( modelInfo.id.startsWith("alpha-") &&