fix(openai): resolve CodeQL security warning for URL sanitization

Author: Qiang

src/api/providers/openai.ts

@@ -155,8 +155,7 @@ export class OpenAiHandler extends BaseProvider implements SingleCompletionHandl
 			const isGrokXAI = this._isGrokXAI(this.options.openAiBaseUrl)
 
 			const isDeepSeekV4 =
-				deepseekReasoner &&
-				(this.options.openAiBaseUrl?.includes("deepseek.com") || modelId.includes("deepseek"))
+				deepseekReasoner && (this._isDeepSeek(this.options.openAiBaseUrl) || modelId.includes("deepseek"))
 
 			const requestOptions: any = {
 				model: modelId,
@@ -243,8 +242,7 @@ export class OpenAiHandler extends BaseProvider implements SingleCompletionHandl
 			}
 		} else {
 			const isDeepSeekV4 =
-				deepseekReasoner &&
-				(this.options.openAiBaseUrl?.includes("deepseek.com") || modelId.includes("deepseek"))
+				deepseekReasoner && (this._isDeepSeek(this.options.openAiBaseUrl) || modelId.includes("deepseek"))
 
 			const requestOptions: any = {
 				model: modelId,
@@ -561,6 +559,11 @@ export class OpenAiHandler extends BaseProvider implements SingleCompletionHandl
 		return urlHost.includes("x.ai")
 	}
 
+	private _isDeepSeek(baseUrl?: string): boolean {
+		const urlHost = this._getUrlHost(baseUrl)
+		return urlHost === "deepseek.com" || urlHost.endsWith(".deepseek.com")
+	}
+
 	protected _isAzureAiInference(baseUrl?: string): boolean {
 		const urlHost = this._getUrlHost(baseUrl)
 		return urlHost.endsWith(".services.ai.azure.com")