Skip to content

[codex] reject remote images at app-server ingress - #29419

Merged
rka-oai merged 5 commits into
mainfrom
codex/reject-remote-image-urls-app-server
Jun 23, 2026
Merged

[codex] reject remote images at app-server ingress#29419
rka-oai merged 5 commits into
mainfrom
codex/reject-remote-image-urls-app-server

Conversation

@rka-oai

@rka-oai rka-oai commented Jun 22, 2026

Copy link
Copy Markdown
Contributor

Stack

Stacked on #29417. Review and land that PR first.

Summary

  • reject HTTP(S) image URLs in the handlers for turn/start and turn/steer
  • validate thread/inject_items after its existing JSON-to-ResponseItem conversion, so each item is deserialized once
  • turn invalid dynamic-tool image responses into the existing unsuccessful text fallback; the model receives the validation message as the function output
  • leave thread/resume.history compatible with legacy history; [codex] replace remote images with model-visible error text #29417 replaces remote images before model input
  • continue accepting inline data URLs and localImage inputs
  • keep this policy in app-server; this PR does not add a shared protocol API or change core image preparation

Test plan

  • just test -p codex-app-server -E 'test(/request_handlers_reject_remote_image_urls|dynamic_tool_remote_image_response_becomes_model_visible_error|dynamic_tool_call_round_trip_sends_content_items_to_model|turn_start_tracks_turn_event_analytics|standalone_image_edit_uses_recent_pathless_image/)' (5 passed)
  • just fix -p codex-app-server
  • just fmt

@rka-oai
rka-oai force-pushed the codex/reject-remote-image-urls branch from 64271e4 to ab0cfce Compare June 22, 2026 17:32
@rka-oai
rka-oai force-pushed the codex/reject-remote-image-urls-app-server branch 4 times, most recently from 84a485f to dc3b8f8 Compare June 22, 2026 19:03
@rka-oai
rka-oai marked this pull request as ready for review June 22, 2026 19:34
@rka-oai
rka-oai force-pushed the codex/reject-remote-image-urls-app-server branch from dc3b8f8 to b719921 Compare June 22, 2026 21:05
Comment thread codex-rs/app-server/src/dynamic_tools.rs Outdated
Comment thread codex-rs/app-server/src/request_processors/turn_processor.rs Outdated

@sayan-oai sayan-oai left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

some small changes requested, unblocking

@rka-oai
rka-oai force-pushed the codex/reject-remote-image-urls branch from 1be79bb to bb63f7d Compare June 22, 2026 23:18
@rka-oai
rka-oai requested a review from a team as a code owner June 22, 2026 23:18
@rka-oai
rka-oai force-pushed the codex/reject-remote-image-urls-app-server branch from b719921 to a649686 Compare June 22, 2026 23:21
Base automatically changed from codex/reject-remote-image-urls to main June 22, 2026 23:41
@rka-oai
rka-oai enabled auto-merge (squash) June 22, 2026 23:42
@rka-oai

rka-oai commented Jun 23, 2026

Copy link
Copy Markdown
Contributor Author

/merge

@rka-oai
rka-oai merged commit b294638 into main Jun 23, 2026
31 checks passed
@rka-oai
rka-oai deleted the codex/reject-remote-image-urls-app-server branch June 23, 2026 00:43
@github-actions github-actions Bot locked and limited conversation to collaborators Jun 23, 2026
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants