WeKnora deployment source with the reviewed wiki identity, summary and recovery fixes

internal/handler/tenant_parser_ssrf_test.go

@@ -0,0 +1,25 @@
+package handler
+
+import (
+	"testing"
+
+	"github.com/Tencent/WeKnora/internal/types"
+	"github.com/stretchr/testify/assert"
+	"github.com/stretchr/testify/require"
+)
+
+func TestValidateParserEngineOutboundURLs_RejectsPrivateMinerUEndpoint(t *testing.T) {
+	err := validateParserEngineOutboundURLs(&types.ParserEngineConfig{
+		MinerUEndpoint: "http://127.0.0.1:8080",
+	})
+	require.Error(t, err)
+	assert.Contains(t, err.Error(), "mineru_endpoint")
+}
+
+func TestValidateParserEngineOutboundURLs_RejectsPrivateVLMServerURL(t *testing.T) {
+	err := validateParserEngineOutboundURLs(&types.ParserEngineConfig{
+		MinerUVLMServerURL: "http://169.254.169.254",
+	})
+	require.Error(t, err)
+	assert.Contains(t, err.Error(), "mineru_vlm_server_url")
+}