DATA
6de0bf9f5b
Vendored deer-flow upstream (bytedance/deer-flow) plus prompt-injection hardening: - New deerflow.security package: content_delimiter, html_cleaner, sanitizer (8 layers — invisible chars, control chars, symbols, NFC, PUA, tag chars, horizontal whitespace collapse with newline/tab preservation, length cap) - New deerflow.community.searx package: web_search, web_fetch, image_search backed by a private SearX instance, every external string sanitized and wrapped in <<<EXTERNAL_UNTRUSTED_CONTENT>>> delimiters - All native community web providers (ddg_search, tavily, exa, firecrawl, jina_ai, infoquest, image_search) replaced with hard-fail stubs that raise NativeWebToolDisabledError at import time, so a misconfigured tool.use path fails loud rather than silently falling back to unsanitized output - Native client back-doors (jina_client.py, infoquest_client.py) stubbed too - Native-tool tests quarantined under tests/_disabled_native/ (collect_ignore_glob via local conftest.py) - Sanitizer Layer 7 fix: only collapse horizontal whitespace, preserve newlines and tabs so list/table structure survives - Hardened runtime config.yaml references only the searx-backed tools - Factory overlay (backend/) kept in sync with deer-flow tree as a reference / source See HARDENING.md for the full audit trail and verification steps.
45 lines
1.5 KiB
TypeScript
45 lines
1.5 KiB
TypeScript
"use client";
|
|
|
|
import * as React from "react";
|
|
import * as HoverCardPrimitive from "@radix-ui/react-hover-card";
|
|
|
|
import { cn } from "@/lib/utils";
|
|
|
|
function HoverCard({
|
|
...props
|
|
}: React.ComponentProps<typeof HoverCardPrimitive.Root>) {
|
|
return <HoverCardPrimitive.Root data-slot="hover-card" {...props} />;
|
|
}
|
|
|
|
function HoverCardTrigger({
|
|
...props
|
|
}: React.ComponentProps<typeof HoverCardPrimitive.Trigger>) {
|
|
return (
|
|
<HoverCardPrimitive.Trigger data-slot="hover-card-trigger" {...props} />
|
|
);
|
|
}
|
|
|
|
function HoverCardContent({
|
|
className,
|
|
align = "center",
|
|
sideOffset = 4,
|
|
...props
|
|
}: React.ComponentProps<typeof HoverCardPrimitive.Content>) {
|
|
return (
|
|
<HoverCardPrimitive.Portal data-slot="hover-card-portal">
|
|
<HoverCardPrimitive.Content
|
|
data-slot="hover-card-content"
|
|
align={align}
|
|
sideOffset={sideOffset}
|
|
className={cn(
|
|
"bg-popover text-popover-foreground data-[state=open]:animate-in data-[state=closed]:animate-out data-[state=closed]:fade-out-0 data-[state=open]:fade-in-0 data-[state=closed]:zoom-out-95 data-[state=open]:zoom-in-95 data-[side=bottom]:slide-in-from-top-2 data-[side=left]:slide-in-from-right-2 data-[side=right]:slide-in-from-left-2 data-[side=top]:slide-in-from-bottom-2 z-50 w-64 origin-(--radix-hover-card-content-transform-origin) rounded-md border p-4 shadow-md outline-hidden",
|
|
className,
|
|
)}
|
|
{...props}
|
|
/>
|
|
</HoverCardPrimitive.Portal>
|
|
);
|
|
}
|
|
|
|
export { HoverCard, HoverCardTrigger, HoverCardContent };
|