@apify/actors-mcp-server 0.11.1-beta.3 → 0.11.1-beta.4
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/dist/tools/core/actor_tools_factory.d.ts.map +1 -1
- package/dist/tools/core/actor_tools_factory.js +10 -8
- package/dist/tools/core/actor_tools_factory.js.map +1 -1
- package/dist/tools/utils.d.ts.map +1 -1
- package/dist/tools/utils.js +8 -0
- package/dist/tools/utils.js.map +1 -1
- package/dist/tsconfig.tsbuildinfo +1 -1
- package/dist/utils/ajv.d.ts.map +1 -1
- package/dist/utils/ajv.js +8 -0
- package/dist/utils/ajv.js.map +1 -1
- package/package.json +1 -1
package/dist/utils/ajv.d.ts.map
CHANGED
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"ajv.d.ts","sourceRoot":"","sources":["../../src/utils/ajv.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,KAAK,CAAC;AAC5C,OAAO,GAAG,MAAM,KAAK,CAAC;AAEtB,eAAO,MAAM,GAAG,KAA2E,CAAC;
|
|
1
|
+
{"version":3,"file":"ajv.d.ts","sourceRoot":"","sources":["../../src/utils/ajv.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,KAAK,CAAC;AAC5C,OAAO,GAAG,MAAM,KAAK,CAAC;AAEtB,eAAO,MAAM,GAAG,KAA2E,CAAC;AAW5F;;;;;;;;;;;;GAYG;AACH,wBAAgB,oBAAoB,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAe7F;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAgB,aAAa,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,gBAAgB,CAE/E"}
|
package/dist/utils/ajv.js
CHANGED
|
@@ -1,5 +1,13 @@
|
|
|
1
1
|
import Ajv from 'ajv';
|
|
2
2
|
export const ajv = new Ajv({ coerceTypes: 'array', strict: false, removeAdditional: true });
|
|
3
|
+
// `pattern`/`patternProperties` compile a RegExp from untrusted Actor / proxied-MCP input schemas;
|
|
4
|
+
// a catastrophic-backtracking pattern freezes the single-threaded event loop (ReDoS). `format` is
|
|
5
|
+
// inert today (ajv-formats is not registered) but would arm the same vector if it ever were. This
|
|
6
|
+
// layer only sanitizes LLM args — the Actor re-validates its real input on the run — so dropping
|
|
7
|
+
// regex enforcement removes the DoS surface with no loss of protection. No `src/` schema uses them.
|
|
8
|
+
ajv.removeKeyword('pattern');
|
|
9
|
+
ajv.removeKeyword('patternProperties');
|
|
10
|
+
ajv.removeKeyword('format');
|
|
3
11
|
/**
|
|
4
12
|
* Removes the `$schema` property and drops fields with real `default` values from `required`.
|
|
5
13
|
*
|
package/dist/utils/ajv.js.map
CHANGED
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"ajv.js","sourceRoot":"","sources":["../../src/utils/ajv.ts"],"names":[],"mappings":"AACA,OAAO,GAAG,MAAM,KAAK,CAAC;AAEtB,MAAM,CAAC,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,EAAE,WAAW,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,gBAAgB,EAAE,IAAI,EAAE,CAAC,CAAC;AAE5F;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,oBAAoB,CAAC,MAA+B;IAChE,MAAM,OAAO,GAAG,EAAE,GAAG,MAAM,EAAE,CAAC;IAC9B,OAAO,OAAO,CAAC,OAAO,CAAC;IAEvB,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,OAAO,OAAO,CAAC,UAAU,KAAK,QAAQ,IAAI,OAAO,CAAC,UAAU,KAAK,IAAI,EAAE,CAAC;QAC3G,MAAM,UAAU,GAAG,OAAO,CAAC,UAAqC,CAAC;QACjE,OAAO,CAAC,QAAQ,GAAI,OAAO,CAAC,QAAqB,CAAC,MAAM,CAAC,CAAC,SAAS,EAAE,EAAE;YACnE,MAAM,WAAW,GAAG,UAAU,CAAC,SAAS,CAAC,CAAC;YAC1C,IAAI,OAAO,WAAW,KAAK,QAAQ,IAAI,WAAW,KAAK,IAAI;gBAAE,OAAO,IAAI,CAAC;YACzE,wEAAwE;YACxE,OAAQ,WAAqC,CAAC,OAAO,KAAK,SAAS,CAAC;QACxE,CAAC,CAAC,CAAC;IACP,CAAC;IAED,OAAO,OAAO,CAAC;AACnB,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,aAAa,CAAC,MAA+B;IACzD,OAAO,GAAG,CAAC,OAAO,CAAC,oBAAoB,CAAC,MAAM,CAAC,CAAC,CAAC;AACrD,CAAC"}
|
|
1
|
+
{"version":3,"file":"ajv.js","sourceRoot":"","sources":["../../src/utils/ajv.ts"],"names":[],"mappings":"AACA,OAAO,GAAG,MAAM,KAAK,CAAC;AAEtB,MAAM,CAAC,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,EAAE,WAAW,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,gBAAgB,EAAE,IAAI,EAAE,CAAC,CAAC;AAE5F,mGAAmG;AACnG,kGAAkG;AAClG,kGAAkG;AAClG,iGAAiG;AACjG,oGAAoG;AACpG,GAAG,CAAC,aAAa,CAAC,SAAS,CAAC,CAAC;AAC7B,GAAG,CAAC,aAAa,CAAC,mBAAmB,CAAC,CAAC;AACvC,GAAG,CAAC,aAAa,CAAC,QAAQ,CAAC,CAAC;AAE5B;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,oBAAoB,CAAC,MAA+B;IAChE,MAAM,OAAO,GAAG,EAAE,GAAG,MAAM,EAAE,CAAC;IAC9B,OAAO,OAAO,CAAC,OAAO,CAAC;IAEvB,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,OAAO,OAAO,CAAC,UAAU,KAAK,QAAQ,IAAI,OAAO,CAAC,UAAU,KAAK,IAAI,EAAE,CAAC;QAC3G,MAAM,UAAU,GAAG,OAAO,CAAC,UAAqC,CAAC;QACjE,OAAO,CAAC,QAAQ,GAAI,OAAO,CAAC,QAAqB,CAAC,MAAM,CAAC,CAAC,SAAS,EAAE,EAAE;YACnE,MAAM,WAAW,GAAG,UAAU,CAAC,SAAS,CAAC,CAAC;YAC1C,IAAI,OAAO,WAAW,KAAK,QAAQ,IAAI,WAAW,KAAK,IAAI;gBAAE,OAAO,IAAI,CAAC;YACzE,wEAAwE;YACxE,OAAQ,WAAqC,CAAC,OAAO,KAAK,SAAS,CAAC;QACxE,CAAC,CAAC,CAAC;IACP,CAAC;IAED,OAAO,OAAO,CAAC;AACnB,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,aAAa,CAAC,MAA+B;IACzD,OAAO,GAAG,CAAC,OAAO,CAAC,oBAAoB,CAAC,MAAM,CAAC,CAAC,CAAC;AACrD,CAAC"}
|