web-search-plus-plugin 1.3.2 → 1.3.3

package/index.ts

@@ -15,6 +15,12 @@ function getPluginDir(): string {
   return path.join(process.cwd(), "skills", "web-search-plus-plugin");
 }
 
+const SENSITIVE_PATTERN = /(?:key|token|secret|password|api[_-]?key)\s*[=:]\s*\S+/gi;
+
+function sanitizeOutput(text: string): string {
+  return text.replace(SENSITIVE_PATTERN, "[REDACTED]");
+}
+
 function loadEnvFile(envPath: string): Record<string, string> {
   if (!fs.existsSync(envPath)) return {};
   const env: Record<string, string> = {};
@@ -66,7 +72,9 @@ function runPython(
       if (!settled) {
         settled = true;
         clearTimeout(timer);
-        resolve({ stdout: "", stderr: err.message, code: 1 });
+        // Only expose the error message, not the full error object (may contain env/args)
+        const safeMsg = err.code === "ENOENT" ? "python3 not found" : "Process error";
+        resolve({ stdout: "", stderr: safeMsg, code: 1 });
       }
     });
   });
@@ -225,14 +233,14 @@ export default definePluginEntry({
           const result = await runPython(args, childEnv, 75000);
 
           if (result.code !== 0) {
-            const stderr = result.stderr.trim() || "Unknown error";
+            const stderr = sanitizeOutput(result.stderr.trim()) || "Unknown error";
             return {
               content: [{ type: "text", text: `Search failed (exit ${result.code}): ${stderr}` }],
             };
           }
 
           return {
-            content: [{ type: "text", text: result.stdout.trim() || "{}" }],
+            content: [{ type: "text", text: sanitizeOutput(result.stdout.trim()) || "{}" }],
           };
         },
       },

package/openclaw.plugin.json

@@ -1,7 +1,7 @@
 {
   "id": "web-search-plus-plugin",
   "name": "Web Search Plus",
-  "version": "1.3.2",
+  "version": "1.3.3",
   "description": "Multi-provider web search (Serper/Google, Tavily, Querit/Multilingual AI Search, Exa/Neural+Deep, Perplexity, You.com, SearXNG) with intelligent auto-routing",
   "configSchema": {
     "type": "object",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "web-search-plus-plugin",
-  "version": "1.3.2",
+  "version": "1.3.3",
   "description": "OpenClaw plugin: multi-provider web search (Serper/Google, Tavily, Querit/Multilingual AI Search, Exa/Neural+Deep, Perplexity, You.com, SearXNG) with intelligent auto-routing",
   "type": "module",
   "main": "index.ts",