mirror of
https://github.com/rooyca/obsidian-api-request.git
synced 2026-07-22 07:50:27 +00:00
No description
| .github | ||
| docs | ||
| src | ||
| .editorconfig | ||
| .eslintignore | ||
| .eslintrc | ||
| .gitignore | ||
| .npmrc | ||
| CODE_OF_CONDUCT.md | ||
| CONTRIBUTING.md | ||
| esbuild.config.mjs | ||
| LICENSE | ||
| manifest.json | ||
| package-lock.json | ||
| package.json | ||
| README.es.md | ||
| README.md | ||
| README.zh.md | ||
| styles.css | ||
| TODOS-v2.md | ||
| tsconfig.json | ||
| version-bump.mjs | ||
| versions.json | ||
APIR - APIRequest
This Obsidian plugin enables users to make API requests directly within their notes and display the response in a code-block.
🔒 Security
This plugin implements comprehensive security measures including:
- Input validation for URLs, paths, and user data
- XSS prevention through HTML sanitization
- Protection against directory traversal attacks
- Safe JSONPath expression evaluation
- Secure localStorage handling
🚀 Installation
The plugin can be installed from within Obsidian.
Obsidian Community Plugin Browser
- Go to
Settings->Community plugins - Make sure
Restricted modeis off - Click
Browse - Search for
APIRequest - Click
Installand thenEnable
🛠️ Usage
Read documentation here
✅ To-do
Check all changes on TODOS-v2.md
- Translate (& update) documentation
- Data re-usage (
{{ls.UUID>JSONPath}}syntax, wherelsstands forlocalStorage) - Support for comments using
#or//syntax - Inline query from response (using Dataview)
- Add tests (!!!)
- Re-implement
repeatflag (repeat requests X times or every X seconds) - Security improvements (input validation, XSS prevention, path traversal protection)
- TypeScript type safety improvements
- Comprehensive error handling
🤝 Contributing
Contributions are welcome! Please read our Contributing Guidelines before submitting a pull request.
Development
# Install dependencies
npm install
# Build
npm run build
# Development mode (auto-rebuild)
npm run dev
For more details, see CONTRIBUTING.md.
🔒 Security Best Practices
When using this plugin:
- Use HTTPS: Always use HTTPS URLs for API requests
- Protect API Keys: Store API keys in global variables, not in notes
- Review Cached Data: Regularly clear old cached responses
- Validate Sources: Only connect to trusted API endpoints
❤️ Sponsors
✍️ Feedback and Contributions
If you encounter any issues or have feedback on the plugin, feel free to open an issue on the GitHub repository.
Contributions are also welcome!
