Skip to content

feat(Integration Cards): Improve generation of Configuration Editor#230

Merged
RandomByte merged 18 commits into
UI5:mainfrom
dimovpetar:feat_config_editor2
Feb 18, 2026
Merged

feat(Integration Cards): Improve generation of Configuration Editor#230
RandomByte merged 18 commits into
UI5:mainfrom
dimovpetar:feat_config_editor2

Conversation

@dimovpetar
Copy link
Copy Markdown
Member

@dimovpetar dimovpetar commented Feb 12, 2026

No description provided.

@dimovpetar dimovpetar changed the title Feat config editor2 feat(Integration Cards): Improve generation of Configuration Editor #204 Feb 12, 2026
@dimovpetar dimovpetar changed the title feat(Integration Cards): Improve generation of Configuration Editor #204 feat(Integration Cards): Improve generation of Configuration Editor Feb 12, 2026
@dimovpetar dimovpetar force-pushed the feat_config_editor2 branch 2 times, most recently from 154d450 to d6cca65 Compare February 12, 2026 13:22
Comment thread resources/template-card/test/index.css Outdated
Comment thread resources/template-card/test/index.css
@flovogt flovogt requested review from RandomByte and akudev February 16, 2026 13:47
@flovogt
Copy link
Copy Markdown
Member

flovogt commented Feb 16, 2026

@akudev @RandomByte Could you please do a review?

akudev
akudev previously approved these changes Feb 16, 2026
Copy link
Copy Markdown
Member

@RandomByte RandomByte left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Unless I'm misunderstanding the implications of this change, it seems similar to the standard create_ui5_app tool, where the LLM can provide arbitrary OData Service endpoints.

For create_ui5_app we introduced a configurable allow-list of OData domains: UI5_MCP_SERVER_ALLOWED_ODATA_DOMAINS. See implementation:

const allowedDomains = getAllowedOdataV4Domains();
if (!isValidUrl(metadataUrl, allowedDomains)) {

I think we should do the same here for consistency and security reasons.

@dimovpetar
Copy link
Copy Markdown
Member Author

Unless I'm misunderstanding the implications of this change, it seems similar to the standard create_ui5_app tool, where the LLM can provide arbitrary OData Service endpoints.

For create_ui5_app we introduced a configurable allow-list of OData domains: UI5_MCP_SERVER_ALLOWED_ODATA_DOMAINS. See implementation:

const allowedDomains = getAllowedOdataV4Domains();
if (!isValidUrl(metadataUrl, allowedDomains)) {

I think we should do the same here for consistency and security reasons.

Done.
I will rename the environment variable and refactor related code in another PR.

Comment thread src/tools/create_integration_card/create_integration_card.ts Outdated
Comment thread src/utils/URLHelper.ts Outdated
Comment thread src/utils/URLHelper.ts Outdated
@coveralls
Copy link
Copy Markdown

coveralls commented Feb 17, 2026

Pull Request Test Coverage Report for Build 22131687830

Warning: This coverage report may be inaccurate.

This pull request's base commit is no longer the HEAD commit of its target branch. This means it includes changes from outside the original pull request, including, potentially, unrelated coverage changes.

Details

  • 19 of 23 (82.61%) changed or added relevant lines in 3 files are covered.
  • No unchanged relevant lines lost coverage.
  • Overall coverage decreased (-0.06%) to 82.488%

Changes Missing Coverage Covered Lines Changed/Added Lines %
src/tools/create_integration_card/create_integration_card.ts 4 8 50.0%
Totals Coverage Status
Change from base Build 22104956914: -0.06%
Covered Lines: 1154
Relevant Lines: 1302

💛 - Coveralls

Only allow alphanumeric characters, space, and ".,'-@_". This is
to prevent code injections.
Comment thread src/tools/create_integration_card/schema.ts Outdated
Copy link
Copy Markdown
Member

@RandomByte RandomByte left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Thanks!

@RandomByte RandomByte merged commit 5f67820 into UI5:main Feb 18, 2026
15 checks passed
@openui5bot openui5bot mentioned this pull request Feb 18, 2026
@dimovpetar dimovpetar deleted the feat_config_editor2 branch February 18, 2026 11:16
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

6 participants