Skip to content

v2.8.3

Choose a tag to compare

View all tags
@Oaklight Oaklight released this 08 Feb 09:40
· 262 commits to master since this release
v2.8.3
7dcb833

Features

  • Improved Claude Leaked Tool Call Parsing: Added new robust parser for extracting leaked tool calls from Claude model responses

    • New leaked_tool_parser module with quote-aware brace counting for accurate dict boundary detection
    • Handle Anthropic content array format (mixed text+tool_use blocks)
    • Extract ALL leaked tool calls, not just the first one
    • Proper handling of braces inside strings (code snippets)
    • Support for escaped quotes in tool arguments
    • Added comprehensive unit tests (24 tests)

  • Attack Logging Module: Added dedicated security logging for malicious HTTP requests

    • Create attack_logger.py module for security logging
    • Log concise warning messages with attack type and source IP
    • Save detailed attack logs to {config_dir}/attack_logs/ directory
    • Classify attacks: struts2_ognl, directory_traversal, ssti_probe, etc.
    • Store logs as compressed JSONL files organized by date

Bug Fixes

  • Streaming UTF-8 Handling: Fixed incomplete UTF-8 sequences in streaming responses
    • Add StreamDecoder utility class to safely decode UTF-8 byte streams where multi-byte characters may be split across network packets
    • Update chat, completions, and responses endpoints to use StreamDecoder
    • Fixes intermittent ValueError: 'utf-8' codec can't decode byte errors

Full Changelog: v2.8.2...v2.8.3

Assets 2
Loading