fix(providers): use URL.hostname match for Gemini detection (#175 follow-up)

Signed-off-by: hqhq1025 <1506751656@qq.com>

Author: hqhq1025

packages/providers/src/gemini-compat.test.ts

@@ -15,6 +15,30 @@ describe('isGeminiOpenAICompat', () => {
   it('returns false when baseUrl is undefined', () => {
     expect(isGeminiOpenAICompat(undefined)).toBe(false);
   });
+
+  it('returns false when baseUrl is empty', () => {
+    expect(isGeminiOpenAICompat('')).toBe(false);
+  });
+
+  it('returns false when baseUrl is not a parseable URL', () => {
+    expect(isGeminiOpenAICompat('not a url')).toBe(false);
+  });
+
+  it('rejects spoofed URLs with Gemini host in query string', () => {
+    expect(
+      isGeminiOpenAICompat('https://attacker.com/?x=generativelanguage.googleapis.com/v1'),
+    ).toBe(false);
+  });
+
+  it('rejects spoofed URLs with Gemini host as subdomain suffix of attacker domain', () => {
+    expect(isGeminiOpenAICompat('https://generativelanguage.googleapis.com.evil.com/v1')).toBe(
+      false,
+    );
+  });
+
+  it('rejects spoofed URLs with Gemini host hyphenated into attacker domain', () => {
+    expect(isGeminiOpenAICompat('https://generativelanguage-googleapis-com.evil.com')).toBe(false);
+  });
 });
 
 describe('normalizeGeminiModelId', () => {

packages/providers/src/gemini-compat.ts

@@ -9,7 +9,15 @@
 
 export function isGeminiOpenAICompat(baseUrl: string | undefined): boolean {
   if (!baseUrl) return false;
-  return baseUrl.includes('generativelanguage.googleapis.com');
+  try {
+    const { hostname } = new URL(baseUrl);
+    return (
+      hostname === 'generativelanguage.googleapis.com' ||
+      hostname.endsWith('.generativelanguage.googleapis.com')
+    );
+  } catch {
+    return false;
+  }
 }
 
 export function normalizeGeminiModelId(modelId: string, baseUrl: string | undefined): string {