$ show Rooyca/obsidian-api-request
This Obsidian plugin enables users to make HTTP API requests directly from within their notes using markdown code blocks. It processes 'req' language blocks to execute GET, POST, PUT, DELETE, PATCH, HEAD, and OPTIONS requests, with support for variable substitution from frontmatter, global variables, and cached responses. The plugin emphasizes security through comprehensive input validation, URL sanitization, JSONPath expression validation, and XSS prevention in output formatting. The architecture separates concerns between the main request processing logic, security utilities, and Obsidian-specific integration points. Key features include response caching via localStorage with unique identifiers, automatic variable resolution, JSONPath-based data extraction, customizable output formatting, and the ability to save responses to files or update frontmatter properties. The plugin implements defense-in-depth security practices to protect against common web vulnerabilities while providing a flexible API integration tool for knowledge workers.
The LLM identified 1 files worth highlighting for reuse:
A collection of security utility functions providing comprehensive input validation and sanitization for API requests. Includes URL validation (http/https only), JSONPath expression validation to prevent injection, UUID sanitization, HTML sanitization for XSS prevention, file path validation to block directory traversal, and safe JSON parsing. These functions are pure, well-typed, and demonstrate defense-in-depth security principles. The module can be extracted with minimal changes as it has no internal dependencies and only relies on the sanitize-html package.