Update version to v1.4.140 and commit

Updated ollama.go to fix a couple of potential DoS issues

.github/workflows/update-version-and-create-tag.yml

@@ -13,6 +13,7 @@ permissions:
 
 jobs:
   update-version:
+    if: github.event_name == 'push' && github.ref == 'refs/heads/main'
     runs-on: ubuntu-latest
 
     steps:

README.md

@@ -66,9 +66,9 @@
 ## Updates
 
 > [!NOTE]
-> February 5, 2025
+> February 24, 2025
 >
-> - Remember that `fabric` supports `o1` and `o3` models, but you need to 1) not use `-s`, and 2) use the `--raw` flag because the o1 and o3 models don't support the `--stream` option or temperature settings.
+> - Fabric now supports Sonnet 3.7! Update and use `-S` to select it as your default if you want, or just use the shortcut `-m claude-3-7-sonnet-latest`. Enjoy!
 
 ## What and why
 

WEB INTERFACE MOD README FILES/pr-1284-update.md

@@ -1,4 +1,6 @@
-# Enhanced Pattern Selection, Pattern Descriptions, New Pattern TAG System, Language Support and other WEB UI Improvements  V3
+https://youtu.be/bhwtWXoMASA# Enhanced Pattern Selection, 
+Pattern Descriptions, New 
+Pattern TAG System, Language Support and other WEB UI Improvements  V3
 
 This Cummulative PR adds several Web UI and functionality improvements to make pattern selection more intuitive (pattern descriptions), ability to save favorite patterns, powerful multilingual capabilities, a Pattern TAG system, a help reference section, more robust Youtube processing and a variety of ui improvements. 
 

pkgs/fabric/version.nix

@@ -1 +1 @@
-"1.4.138"
+"1.4.140"

restapi/chat.go

@@ -55,6 +55,7 @@ func (h *ChatHandler) HandleChat(c *gin.Context) {
 
 	if err := c.BindJSON(&request); err != nil {
 		log.Printf("Error binding JSON: %v", err)
+		c.Writer.Header().Set("Strict-Transport-Security", "max-age=63072000; includeSubDomains")
 		c.JSON(http.StatusBadRequest, gin.H{"error": fmt.Sprintf("Invalid request format: %v", err)})
 		return
 	}

restapi/configuration.go

@@ -90,7 +90,7 @@ func (h *ConfigHandler) UpdateConfig(c *gin.Context) {
 		LMStudioURL      string `json:"lm_studio_base_url"`
 	}
 
-	if err := c.BindJSON(&config); err != nil {
+	if err := c.ShouldBindJSON(&config); err != nil {
 		c.JSON(http.StatusBadRequest, gin.H{"error": err.Error()})
 		return
 	}

restapi/ollama.go

@@ -5,18 +5,32 @@ import (
 	"context"
 	"encoding/json"
 	"fmt"
-	"github.com/danielmiessler/fabric/core"
-	"github.com/gin-gonic/gin"
 	"io"
 	"log"
 	"net/http"
 	"strings"
 	"time"
+
+	"github.com/danielmiessler/fabric/core"
+	"github.com/gin-gonic/gin"
 )
 
 type OllamaModel struct {
 	Models []Model `json:"models"`
 }
+
+func isValidOllamaRequestBody(body OllamaRequestBody) bool {
+	if body.Model == "" || len(body.Messages) == 0 {
+		return false
+	}
+	for _, msg := range body.Messages {
+		if msg.Content == "" || msg.Role == "" {
+			return false
+		}
+	}
+	return true
+}
+
 type Model struct {
 	Details    ModelDetails `json:"details"`
 	Digest     string       `json:"digest"`
@@ -142,12 +156,16 @@ func (f APIConvert) ollamaTags(c *gin.Context) {
 		})
 	}
 
-	c.JSON(200, response)
-
-}
-
-func (f APIConvert) ollamaChat(c *gin.Context) {
-	body, err := io.ReadAll(c.Request.Body)
+	if !isValidOllamaRequestBody(prompt) {
+		log.Printf("Invalid request body: %v", prompt)
+		c.JSON(http.StatusBadRequest, gin.H{"error": "invalid request body"})
+		return
+	}
+	if !isValidOllamaRequestBody(prompt) {
+		log.Printf("Invalid request body: %v", prompt)
+		c.JSON(http.StatusBadRequest, gin.H{"error": "invalid request body"})
+		return
+	}
 	if err != nil {
 		log.Printf("Error reading body: %v", err)
 		c.JSON(http.StatusInternalServerError, gin.H{"error": "testing endpoint"})

version.go

@@ -1,3 +1,3 @@
 package main
 
-var version = "v1.4.138"
+var version = "v1.4.140"