jpmschweitzer/odysseus
1
0
Fork 0
mirror of https://github.com/pewdiepie-archdaemon/odysseus.git synced 2026-09-29 03:22:21 +02:00
Code Issues Packages Projects Releases Wiki Activity

fix: taint prefetched web context

Browse Source
This commit is contained in:
RaresKeY
2026-08-15 01:57:09 +00:00
parent fef0e6f3c0
commit 329f9d298d
4 changed files with 46 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files
src/tool_capabilities.py
+7 -1
View File
@@ -280,6 +280,7 @@ _EXTERNAL_MESSAGE_SOURCES = frozenset(
"youtube transcript",
}
)
_EXTERNAL_MESSAGE_SOURCE_PREFIXES = ("web page:",)
def messages_contain_external_untrusted_context(messages: Iterable[dict]) -> bool:
@@ -293,7 +294,12 @@ def messages_contain_external_untrusted_context(messages: Iterable[dict]) -> boo
if metadata.get("provenance_origin") == "external":
return True
source = metadata.get("source")
if isinstance(source, str) and source.strip().casefold() in _EXTERNAL_MESSAGE_SOURCES:
if not isinstance(source, str):
continue
normalized_source = source.strip().casefold()
if normalized_source in _EXTERNAL_MESSAGE_SOURCES:
return True
if normalized_source.startswith(_EXTERNAL_MESSAGE_SOURCE_PREFIXES):
return True
return False