[Bug] Vite package auto update causing 403 error when accessing UI using hostname rather than ip address

[Ruoyu-y]

Priority

P1-Stopper

OS type

Ubuntu

Hardware type

Xeon-SPR

Installation method

• Pull docker images from hub.docker.com
• Build docker images from source
• Other

Deploy method

• Docker
• Docker Compose
• Kubernetes Helm Charts
• Kubernetes GMC
• Other

Running nodes

Single Node

What's the version?

commit ID: 0408453

Description

Starting from version 5.4.12, vite enable check host header to prevent DNS rebinding attacks and introduce server.allowedHosts, which blocks the ui access with hostname.

Reproduce steps

Build UI from source code install ui using helm chart. Then access the UI with hostname instead of ip address

Raw log

curl: (22) The requested URL returned error: 403
Blocked request. This host ("chatqna-chatqna-ui") is not allowed.
To allow this host, add "chatqna-chatqna-ui" to `server.allowedHosts` in vite.config.js.curl failed with code 22

Attachments

No response