jiazhizhong/higress
1
0
Fork 0
mirror of https://github.com/alibaba/higress.git synced 2026-05-25 21:28:17 +08:00
Code Issues Packages Projects Releases Wiki Activity

fix(ai-security-guard): 移除Suggestion=block的兜底逻辑，改为基于阈值判断 || fix(ai-security-guard): Remove the cover-up logic of Suggestion=block and change it to based on threshold judgment (#3731)

Browse Source 
Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>
This commit is contained in:
JianweiWang
2026-04-17 14:42:22 +08:00
committed by GitHub
parent 94b40aab9a
commit 9128cbf729
5 changed files with 85 additions and 69 deletions
Download Patch File Download Diff File Expand all files Collapse all files

8
plugins/wasm-go/extensions/ai-security-guard/main_test.go
View File

@@ -1467,7 +1467,7 @@ func TestIsRiskLevelAcceptable(t *testing.T) {
{Suggestion: "block", Type: "contentModeration", Level: "high"},
},
}
require.False(t, cfg.IsRiskLevelAcceptable(cfg.MultiModalGuard, data, config, ""))
require.True(t, cfg.IsRiskLevelAcceptable(cfg.MultiModalGuard, data, config, ""))
})
// 用例 3: riskAction=mask, 无风险 → 应返回 true
@@ -2549,7 +2549,7 @@ func TestBuildDenyResponseBody(t *testing.T) {
require.Equal(t, "high", result.BlockedDetails[0].Level)
})
t.Run("blockedDetails includes explicit block suggestion below threshold", func(t *testing.T) {
t.Run("blockedDetails empty when suggestion=block but below threshold", func(t *testing.T) {
resp := cfg.Response{
Code: 200,
RequestId: "req-suggestion-block",
@@ -2566,9 +2566,7 @@ func TestBuildDenyResponseBody(t *testing.T) {
var result cfg.DenyResponseBody
require.NoError(t, json.Unmarshal(body, &result))
require.Len(t, result.BlockedDetails, 1)
require.Equal(t, cfg.SensitiveDataType, result.BlockedDetails[0].Type)
require.Equal(t, "S3", result.BlockedDetails[0].Level)
require.Len(t, result.BlockedDetails, 0)
})
t.Run("blockedDetails includes customLabel when threshold exceeded", func(t *testing.T) {