Aias00 opened a new issue, #6757:
URL: https://github.com/apache/shenyu/issues/6757

   - severity: Medium
   - files: 
`shenyu-plugin/shenyu-plugin-ai/shenyu-plugin-ai-response-transformer/src/main/java/org/apache/shenyu/plugin/ai/transformer/response/AiResponseTransformerPlugin.java:282-380`
   - description: `AiResponseTransformerDecorator` overrides only `writeWith`. 
`ServerHttpResponseDecorator.writeAndFlushWith` delegates to the underlying 
response, so any upstream that writes via `writeAndFlushWith` (chunked/SSE) 
flows through with no transformation. By contrast 
`AiTokenLimiterPlugin.AiStatisticServerHttpResponse` overrides BOTH.
   - impact: Streaming AI responses are silently left un-transformed despite 
the plugin being configured.
   - suggested_fix: Override `writeAndFlushWith` and route inner publishers 
through the same transform.
   - confidence: Medium-High
   - related_existing: none
   
   ---
   _Identified during the 2026-08-02 deep re-scan; full list in 
[`docs/scan2-2026-08-02/06-medium-tiers.md`](docs/scan2-2026-08-02/06-medium-tiers.md)._


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: [email protected]

For queries about this service, please contact Infrastructure at:
[email protected]

Reply via email to