Python: fix for Incomplete URL substring sanitization (#2274)

* Potential fix for code scanning alert no. 29: Incomplete URL substring sanitization

Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com>

* Python: Fix URL parsing to handle trailing punctuation in deployment progress detection (#2296)

* Initial plan

* Fix URL parsing to handle trailing punctuation correctly

Co-authored-by: eavanvalkenburg <[email protected]>

---------

Co-authored-by: copilot-swe-agent[bot] <[email protected]>
Co-authored-by: eavanvalkenburg <[email protected]>

* updated lock

---------

Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com>
Co-authored-by: Copilot <[email protected]>
Co-authored-by: eavanvalkenburg <[email protected]>
Co-authored-by: Victor Dibia <[email protected]>

Author: 4 people

python/packages/devui/agent_framework_devui/_deployment.py

@@ -10,6 +10,7 @@
 from collections.abc import AsyncGenerator
 from datetime import datetime, timezone
 from pathlib import Path
+from urllib.parse import urlparse
 
 from .models._discovery_models import Deployment, DeploymentConfig, DeploymentEvent
 
@@ -467,11 +468,18 @@ async def _deploy_to_azure(
                         await event_queue.put(
                             DeploymentEvent(type="deploy.progress", message=f"Docker build: {line_text}")
                         )
-                    elif "https://" in line_text and ".azurecontainerapps.io" in line_text:
-                        # Deployment URL detected
-                        await event_queue.put(
-                            DeploymentEvent(type="deploy.progress", message="Deployment URL generated!")
-                        )
+                    elif "https://" in line_text:
+                        # Try to extract all URLs and check if any is on azurecontainerapps.io
+                        urls = re.findall(r'https://[^\s<>"]+', line_text)
+                        for url in urls:
+                            # Strip common trailing punctuation to ensure clean URL parsing
+                            url_clean = url.rstrip(".,;:!?'\")}]")
+                            host = urlparse(url_clean).hostname
+                            if host and (host == "azurecontainerapps.io" or host.endswith(".azurecontainerapps.io")):
+                                await event_queue.put(
+                                    DeploymentEvent(type="deploy.progress", message="Deployment URL generated!")
+                                )
+                                break
 
             # Wait for process to complete
             return_code = await process.wait()