@@ -398,13 +398,13 @@ The Control UI is static files; the WebSocket target is configurable and can be
398398</Step>
399399<Step title="Open with gatewayUrl">
400400```text
401-http://localhost:5173/?gatewayUrl=ws://<gateway-host>:18789
401+http://localhost:5173/?gatewayUrl=ws%3A%2F%2F<gateway-host>%3A18789
402402```
403403404404Optional one-time auth (if needed):
405405406406```text
407-http://localhost:5173/?gatewayUrl=wss://<gateway-host>:18789#token=<gateway-token>
407+http://localhost:5173/?gatewayUrl=wss%3A%2F%2F<gateway-host>%3A18789#token=<gateway-token>
408408```
409409410410</Step>
@@ -413,6 +413,7 @@ The Control UI is static files; the WebSocket target is configurable and can be
413413<AccordionGroup>
414414<Accordion title="Notes">
415415- `gatewayUrl` is stored in localStorage after load and removed from the URL.
416+- If you pass a full `ws://` or `wss://` endpoint via `gatewayUrl`, URL-encode the `gatewayUrl` value so the browser parses the query string correctly.
416417- `token` should be passed via the URL fragment (`#token=...`) whenever possible. Fragments are not sent to the server, which avoids request-log and Referer leakage. Legacy `?token=` query params are still imported once for compatibility, but only as a fallback, and are stripped immediately after bootstrap.
417418- `password` is kept in memory only.
418419- When `gatewayUrl` is set, the UI does not fall back to config or environment credentials. Provide `token` (or `password`) explicitly. Missing explicit credentials is an error.
此内容由惯性聚合(RSS阅读器)自动聚合整理，仅供阅读参考。 原文来自 — 版权归原作者所有。