Skip to content

v0.3.2 - Built-in Generic Web Fetch & Fallback

Choose a tag to compare

@A3Boy A3Boy released this 03 Sep 03:01
· 16 commits to main since this release

Fixed

  • Built-in Generic Web Fetch (Issue #5): Decoupled web_fetch availability from search-only providers (SearXNG, Brave). The plugin now includes a built-in, zero-API-key HTTP fetcher powered by linkedom and Defuddle markdown extraction.
  • Resilient Fallback Hierarchy: Fetch requests attempt native provider extraction (Tavily, Exa, Jina, Firecrawl, Parallel) first, cleanly falling back to built-in generic extraction when native providers are unconfigured or fail.
  • SSRF & Redirect Security: Built-in HTTP fetcher strictly validates protocols, rejects private/loopback/cloud metadata (169.254.169.254) IP ranges, and performs per-hop SSRF validation across up to 5 manual redirects.
  • Bounded Stream Protection: Implemented a strict 5 MiB stream reader with graceful truncation and unsupported binary MIME filtering.