Repository navigation
feat: Add gitlab.com support to is_safe_download_url() in path_sandbox.py #1234
Description
Is there an existing issue for this?
I have searched the existing issues and found none.
Problem Statement
In src/codegraphcontext/utils/path_sandbox.py, the _ALLOWED_DOWNLOAD_HOST_SUFFIXES tuple currently only allows downloads from:
huggingface.co
hf.co
github.com
raw.githubusercontent.com
GitLab is a widely used code hosting platform just like GitHub, but gitlab.com and its raw content URL raw.gitlab.com are not included. This means users who host their CGC bundles on GitLab cannot download them.
Proposed Solution
Add gitlab.com and raw.gitlab.com to the allowed hosts:
_ALLOWED_DOWNLOAD_HOST_SUFFIXES = (
"huggingface.co",
"hf.co",
"github.com",
"raw.githubusercontent.com",
"gitlab.com",
"raw.gitlab.com",
)
Benefits
Supports GitLab users who host bundles there
Consistent with the existing GitHub support
One line change with no breaking changes
Record
I agree to follow this project's Code of Conduct
I want to work on this issue
Metadata
Metadata
Assignees
Labels
Type
Projects
- Status
- Status
Activity
github-actions commentedon Jun 13, 2026
Hi! 👋 Join our CodeGraphContext Discord channel to collaborate: https://discord.gg/dR4QY32uYQ
sanatan0511 commentedon Jun 13, 2026
please assign this issue to me! I will love to contribute and work on it
madsysharma commentedon Jun 16, 2026
/assign
I would like to work on this as part of GSSoC 2026.
Shashankss1205 commentedon Oct 15, 2026
Maintenance review — 15 October 2026
Implemented #1768: HTTPS GitLab bundle hosts are supported with the existing hostname-boundary policy. Tests retain rejection of HTTP, lookalike domains, userinfo-to-another-host and loopback URLs.