mirror of https://github.com/openclaw/openclaw.git synced 2026-08-19 00:52:10 -06:00

Files

T

Alix-007 56068f7698 fix(exa): bound untrusted search JSON response reads (#96038 )

Exa search success responses were read via an unbounded `await
response.json()`, so a misbehaving or hostile endpoint could stream an
arbitrarily large body into memory before parsing. Read the success
body through the shared bounded reader (16 MiB cap, the same limit other
bundled providers use) and cancel the stream on overflow. This mirrors
the error-body bound already in place and the #95103/#95108 response
-limit campaign on the success-JSON side.

AI-assisted.

(cherry picked from commit 605aede38c)

2026-08-06 18:50:20 +08:00

src

fix(exa): bound untrusted search JSON response reads (#96038 )

2026-08-06 18:50:20 +08:00

index.ts

docs: document small extension sources

2026-06-04 21:02:07 -04:00

npm-shrinkwrap.json

chore(release): prepare 2026.6.34 extended-stable (#112513 )

2026-07-21 22:13:20 -07:00

openclaw.plugin.json

refactor: internalize OpenClaw agent runtime (#85341 )

2026-05-27 19:24:04 +01:00

package.json

chore(release): prepare 2026.6.34 extended-stable (#112513 )

2026-07-21 22:13:20 -07:00

README.md

feat(plugins): externalize official provider batch

2026-06-19 01:05:52 +08:00

test-api.ts

docs: document small extension sources

2026-06-04 21:02:07 -04:00

tsconfig.json

chore(plugins): bulk add package boundary tsconfig rollout

2026-04-07 08:48:23 +01:00

web-search-contract-api.ts

docs: document small extension sources

2026-06-04 21:02:07 -04:00

web-search-provider.ts

docs: document small extension sources

2026-06-04 21:02:07 -04:00

README.md

OpenClaw Exa Plugin

Official OpenClaw plugin for Exa.

Install from OpenClaw:

openclaw plugins install @openclaw/exa-plugin
openclaw gateway restart

See https://docs.openclaw.ai/tools/exa-search for setup and configuration.