Aishanee Shah
35ea04258b
refactor(core): harden webfetch security and error handling
...
- Implemented strict host blocking for localhost/127.0.0.1 in all paths.
- Applied consistent URL normalization and deduplication.
- Standardized error extraction using getErrorMessage.
- Updated warning strings for better transparency on skipped URLs.
2026-03-10 00:24:34 +00:00
Aishanee Shah
d783ccc43b
refactor(core): simplify webfetch logic for easier review
...
- Streamlined execute loop with integrated rate limiting and SSRF checks.
- Simplified fallback to all-or-nothing mode.
- inlined grounding and source list formatting for cleaner diff.
- Resolved ESLint unsafe type assertion issues using runtime type guards.
2026-03-09 20:06:12 +00:00
Aishanee Shah
b1fef3b5ec
fix(core): enhance webfetch security and reliability based on PR feedback
2026-03-09 18:08:38 +00:00
Aishanee Shah
5e6b26429c
fix(core): remove private IP rescue to address SSRF vulnerability and fix formatting
2026-03-09 18:08:38 +00:00
Aishanee Shah
3bfd87530c
feat(core): implement Stage 1 improvements for webfetch tool
2026-03-09 18:08:38 +00:00
Michael Bleigh
70336e73b1
feat(core): implement experimental direct web fetch ( #19557 )
2026-02-23 19:50:14 +00:00
matt korwel
0f855fc0c4
fix(security): rate limit web_fetch tool to mitigate DDoS via prompt injection ( #19567 )
...
Co-authored-by: gemini-code-assist[bot] <176961590+gemini-code-assist[bot]@users.noreply.github.com>
2026-02-20 17:18:07 +00:00
Abhijit Balaji
3408542a66
fix(core): prevent duplicate tool approval entries in auto-saved.toml ( #19487 )
...
Co-authored-by: gemini-code-assist[bot] <176961590+gemini-code-assist[bot]@users.noreply.github.com>
2026-02-19 20:03:52 +00:00
Abhi
12c7c9cc42
feat(core,cli): enforce mandatory MessageBus injection (Phase 3 Hard Migration) ( #15776 )
2026-01-04 22:11:43 +00:00
matt korwel
dd3fd73ffe
fix(core): improve API response error handling and retry logic ( #14563 )
2025-12-05 17:49:08 +00:00
Riddhi Dutta
1d1bdc57ce
Refactored 4 files of tools package ( #13235 )
...
Co-authored-by: riddhi <duttariddhi@google.com >
2025-11-17 19:31:29 +00:00
joshualitt
a4415f15d3
feat(core): Migrate generateContent to model configs. ( #12834 )
2025-11-11 16:10:50 +00:00
N. Taylor Mullen
7bb13d1c41
telemetry: track interactive session state ( #12856 )
...
Co-authored-by: owenofbrien <86964623+owenofbrien@users.noreply.github.com >
2025-11-11 10:03:32 +00:00
Allen Hutchison
ffc5e4d048
Refactor PolicyEngine to Core Package ( #12325 )
...
Co-authored-by: gemini-code-assist[bot] <176961590+gemini-code-assist[bot]@users.noreply.github.com>
2025-11-03 23:41:00 +00:00
Allen Hutchison
b188a51c32
feat(core): Introduce message bus for tool execution confirmation ( #11544 )
...
Co-authored-by: gemini-code-assist[bot] <176961590+gemini-code-assist[bot]@users.noreply.github.com>
2025-10-24 20:04:40 +00:00
Allen Hutchison
bf80263bd6
feat: Implement message bus and policy engine ( #11523 )
...
Co-authored-by: gemini-code-assist[bot] <176961590+gemini-code-assist[bot]@users.noreply.github.com>
2025-10-21 18:45:33 +00:00
Abhi
05930d5e25
fix(web-fetch): respect Content-Type header in fallback mechanism ( #11284 )
2025-10-16 18:16:24 +00:00
Allen Hutchison
b8df8b2ab8
feat(core): wire up UI for ASK_USER policy decisions in message bus ( #10630 )
2025-10-15 16:39:41 +00:00
Abhi
6f0107e7b7
fix(core): implement robust URL validation in web_fetch tool ( #10834 )
2025-10-14 20:53:22 +00:00
Abhi
70610c740e
feat(telemetry): Add telemetry for web_fetch fallback attempts ( #10749 )
2025-10-09 17:01:17 +00:00
Pascal Birchler
0f031a7f89
Explict imports & exports with type modifier ( #3774 )
2025-08-25 22:04:53 +00:00
joshualitt
ec41b8db8e
feat(core): Annotate remaining error paths in tools with type. ( #6699 )
2025-08-21 21:40:18 +00:00
joshualitt
c0c0e9b7a0
feat(core): Migrate read_many_files, shell, and web_fetch. ( #6167 )
2025-08-13 19:27:09 +00:00
warjiang
606a7702de
feat(cli): add explicit proxy option in cli ( #2526 )
...
Co-authored-by: Dcatfly <dcatfly@gmail.com >
2025-07-17 18:57:37 +00:00
Allen Hutchison
31b28ade01
Improvements to web-fetch tool ( #1030 )
2025-06-13 17:44:14 -07:00
