fix: add URL encoding for model IDs in refUrls

[continue]

Summary

This PR fixes a URL injection vulnerability in the dynamic model fetching code introduced in the parent PR.

Security Issue Fixed

URL Injection in fetchProviderModels.ts

The toOllamaPackage and toOpenRouterPackage functions were constructing URLs using unencoded model names/IDs:

// Before (vulnerable)
refUrl: `https://ollama.com/library/${model.name}`
refUrl: `https://openrouter.ai/models/${id}`

If a malicious model name contained special URL characters (e.g., ../, ?, #, /), it could lead to URL path traversal or manipulation.

// After (fixed)
refUrl: `https://ollama.com/library/${encodeURIComponent(model.name)}`
refUrl: `https://openrouter.ai/models/${encodeURIComponent(id)}`

Changes

• gui/src/pages/AddNewModel/configs/fetchProviderModels.ts: Added encodeURIComponent() for model names in URL construction

---

Generated with Continue

Co-authored-by: bekah-hawrot-weigel bekah@continue.dev

---

Summary by cubic

Encode model names and IDs in reference URLs to prevent URL injection in the Add New Model flow. This stops path traversal when names include special characters.

• Bug Fixes
  • Use encodeURIComponent() for refUrl in toOllamaPackage and toOpenRouterPackage in gui/src/pages/AddNewModel/configs/fetchProviderModels.ts.

^{Written for commit 1bb133a. Summary will update on new commits.}

[continue]

Docs Review

No documentation updates needed for this PR.

Reason: This is an internal security fix that adds URL encoding (encodeURIComponent()) when constructing model reference URLs in the Add New Model flow. This change:

• Is an internal implementation detail in the GUI code
• Does not affect any user-facing APIs, configuration options, or commands
• Does not change any behavior that developers need to understand or interact with differently

The fix is purely defensive security hardening with no impact on how users configure or use Continue.

[continue]

Test Coverage Review

This bug fix adds URL encoding for model IDs in refUrl construction, which is a good defensive change. However, per our testing guidelines, bug fixes should include regression tests.

Suggested Tests

Consider adding tests for the toOllamaPackage and toOpenRouterPackage functions in gui/src/pages/AddNewModel/configs/fetchProviderModels.test.ts:

1. Model IDs with forward slashes (common in OpenRouter): anthropic/claude-3-opus → https://openrouter.ai/models/anthropic%2Fclaude-3-opus
2. Model IDs with colons (Ollama tags): llama3:70b → https://ollama.com/library/llama3%3A70b
3. Model IDs with hash/query-like characters: Ensure # or ? don't break the URL

These tests would prevent regression if the encoding is accidentally removed and document the expected behavior for special characters in model IDs.

[cubic-dev-ai]

No issues found across 1 file