mirror of
https://github.com/openclaw/openclaw.git
synced 2026-06-24 22:29:33 +00:00
* fix(parallel): bound successful web-search JSON response reads The Parallel web_search provider parsed its /v1/search success body with an unbounded await res.json(). The body comes from an external web-search upstream, so a hostile or malfunctioning endpoint streaming an unbounded JSON payload could force the runtime to buffer the whole response before parsing, creating memory pressure or a hang on the provider path. Read the success body through the shared readProviderJsonResponse helper with a 16 MiB cap (matching the provider JSON cap from #95218); on overflow the stream is cancelled and a bounded error is thrown. The error-body path was already bounded (readResponseTextLimited, 8 KiB). Symmetric follow-up to the #95103/#95108 response-limit campaign. * docs(parallel): drop upstream PR ref from response-cap comment Replace the PR-specific '#95218' annotation with a neutral description of the shared provider JSON cap so the comment stays accurate independent of upstream PR numbering.
OpenClaw Parallel Plugin
Official OpenClaw plugin for Parallel.
Install from OpenClaw:
openclaw plugins install @openclaw/parallel-plugin
openclaw gateway restart
See https://docs.openclaw.ai/tools/parallel-search for setup and configuration.