1803b4e0b8
- cloud_vision: raise on a per-image error inside a 200 response so the adapter records a FAILURE instead of a silent "no results" that also debited quota; send the key via X-goog-api-key header (verified for Vision) not the URL. - search_policy: reset the daily_limit counter on a calendar-day rollover (it never re-windowed, so a hit limit disabled the provider until restart) and guard calls_made with a lock. - google_custom_search: map the API response inside the adapter's try so a malformed payload becomes ENRICHMENT_FAILURE, not an uncaught crash. (Key stays a query param — the header is unverified for this endpoint.) - http_json: cap the response body (10 MiB) and convert decode/read/OS errors into HttpJsonError so nothing escapes the transport contract. - store_remote_fetch: SSRF guard rejects any non-global address (`not is_global`), covering CGNAT 100.64/10 the flag list missed. - env_clients: a malformed daily-limit env falls back to a conservative cap (not fail-open unlimited); clamp NAVER display sizes. - preprocessing: warn when external-derivative re-encoding falls back to the original bytes (EXIF/GPS may not have been stripped). Tests: Vision per-image error raises / converts to FAILURE; daily-limit malformed falls back conservatively. |
||
|---|---|---|
| .. | ||
| operator_gui | ||
| rights_filter | ||