[GH-ISSUE #5732] [BUG]: cannot fetch website if it is a locally hosted static website (response is about invalid url) #5264

Closed
opened 2026-06-05 14:53:00 -04:00 by yindo · 3 comments
Owner

Originally created by @kajiev on GitHub (May 31, 2026).
Original GitHub issue: https://github.com/Mintplex-Labs/anything-llm/issues/5732

How are you running AnythingLLM?

Docker (local)

What happened?

Feature "fetch website" doesn't work for a locally hosted static website.
Seems to be working (somehow good or bad) for other cases.

When using "Upload documents", then "fetch website" => the app says "Error uploading link: Not a valid URL."

When using "Updoad documents", "Data Connectors" - Bulk link scraper, => a similar error occurs at backend,
/app/collector/extenstions/index.js:131:44

Are there known steps to reproduce?

URL is as follows:
http://192.168.1.4:5500/site/docs/A-524737-RFC-20260422-stateflow-notes/index.html

Tried also http://192.168.1.4:5500/site/docs/A-524737-RFC-20260422-stateflow-notes/ - same result.

LLM Provider & Model (if applicable)

not important

Embedder Provider & Model (if applicable)

not used

Originally created by @kajiev on GitHub (May 31, 2026). Original GitHub issue: https://github.com/Mintplex-Labs/anything-llm/issues/5732 ### How are you running AnythingLLM? Docker (local) ### What happened? Feature "fetch website" doesn't work for a locally hosted static website. Seems to be working (somehow good or bad) for other cases. When using "Upload documents", then "fetch website" => the app says "Error uploading link: Not a valid URL." When using "Updoad documents", "Data Connectors" - Bulk link scraper, => a similar error occurs at backend, /app/collector/extenstions/index.js:131:44 ### Are there known steps to reproduce? URL is as follows: `http://192.168.1.4:5500/site/docs/A-524737-RFC-20260422-stateflow-notes/index.html` Tried also `http://192.168.1.4:5500/site/docs/A-524737-RFC-20260422-stateflow-notes/` - same result. ### LLM Provider & Model (if applicable) not important ### Embedder Provider & Model (if applicable) not used
yindo added the possible bug label 2026-06-05 14:53:00 -04:00
yindo closed this issue 2026-06-05 14:53:00 -04:00
Author
Owner

@kajiev commented on GitHub (May 31, 2026):

Basically, I'm trying to share antora docs from VSCode + LiveServer.
At first, I've run into misconfigured firewall, but after that the docs are accessible from both client and the backend (with ALLM docker) by the provided url.

<!-- gh-comment-id:4586640566 --> @kajiev commented on GitHub (May 31, 2026): Basically, I'm trying to share antora docs from VSCode + LiveServer. At first, I've run into misconfigured firewall, but after that the docs are accessible from both client and the backend (with ALLM docker) by the provided url.
Author
Owner

@kajiev commented on GitHub (May 31, 2026):

UPD: I'm sorry, the docs mention this one.
Setting COLLECTOR_ALLOW_ANY_IP="true" helped me, no issue here.

Can you change the error message to a less obfuscated by default, say "Operation is not permitted by your server configuration"?

<!-- gh-comment-id:4586674204 --> @kajiev commented on GitHub (May 31, 2026): UPD: I'm sorry, the docs mention this one. Setting `COLLECTOR_ALLOW_ANY_IP="true"` helped me, no issue here. Can you change the error message to a less obfuscated by default, say "Operation is not permitted by your server configuration"?
Author
Owner

@timothycarambat commented on GitHub (Jun 1, 2026):

The obscure error message is intentional since showing the non-generic error message is actually a shallow defense in depth output so that it isnt clear where the error originates from from an external attacker POV.

We could internally log when this enabled flag is hit in the server logs though? That would help? Let me know
https://github.com/Mintplex-Labs/anything-llm/blob/master/collector/utils/url/index.js#L68

<!-- gh-comment-id:4593780206 --> @timothycarambat commented on GitHub (Jun 1, 2026): The obscure error message is intentional since showing the non-generic error message is actually a shallow defense in depth output so that it isnt clear where the error originates from from an external attacker POV. We could internally log when this enabled flag is hit in the server logs though? That would help? Let me know https://github.com/Mintplex-Labs/anything-llm/blob/master/collector/utils/url/index.js#L68
Sign in to join this conversation.
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: Mintplex-Labs/anything-llm#5264