You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Built-in Generic Web Fetch (Issue #5): Decoupled web_fetch availability from search-only providers (SearXNG, Brave). The plugin now includes a built-in, zero-API-key HTTP fetcher powered by linkedom and Defuddle markdown extraction.
Resilient Fallback Hierarchy: Fetch requests attempt native provider extraction (Tavily, Exa, Jina, Firecrawl, Parallel) first, cleanly falling back to built-in generic extraction when native providers are unconfigured or fail.
SSRF & Redirect Security: Built-in HTTP fetcher strictly validates protocols, rejects private/loopback/cloud metadata (169.254.169.254) IP ranges, and performs per-hop SSRF validation across up to 5 manual redirects.
Bounded Stream Protection: Implemented a strict 5 MiB stream reader with graceful truncation and unsupported binary MIME filtering.