mirror of
https://github.com/danielmiessler/fabric.git
synced 2026-09-10 07:36:44 -04:00
f37c71f9f7
- Reject unsafe cross-platform storage names and traversal attempts. - Confine symlink targets within configured filesystem storage directories. - Require API keys for every non-loopback server binding. - Authenticate Ollama routes and securely forward configured credentials. - Validate chat pattern, context, and session names early. - Sanitize client errors to hide internal filesystem details. - Default REST server binding to loopback port 8080. - Add regression coverage for traversal, symlinks, and authentication.
19 lines
727 B
Go
19 lines
727 B
Go
package db
|
|
|
|
// Storage is the contract for a named-entity store. Each implementation
|
|
// specifies the names that are valid. It rejects an invalid name with a
|
|
// typed error. Callers can map this error to a client error.
|
|
type Storage[T any] interface {
|
|
Configure() (err error)
|
|
Get(name string) (ret *T, err error)
|
|
GetNames() (ret []string, err error)
|
|
Delete(name string) (err error)
|
|
// Exists reports false for an invalid name. It cannot show the
|
|
// difference between a rejected name and an absent entry.
|
|
Exists(name string) (ret bool)
|
|
Rename(oldName, newName string) (err error)
|
|
Save(name string, content []byte) (err error)
|
|
Load(name string) (ret []byte, err error)
|
|
ListNames(shellCompleteList bool) (err error)
|
|
}
|