feat: Add sidebar TOC navigation, code block styling, and table design system#8
Conversation
Co-authored-by: RunningShrimp <59407382+RunningShrimp@users.noreply.github.com>
feat: add sidebar table of contents navigation component
…ture-and-navigation [WIP] Optimize GitHub Pages structure and navigation experience
…w-knowledge [WIP] Add comprehensive high-frequency interview questions and answers
Feature/add sidebar toc
Feature/add sidebar toc
Merge pull request #8 from RunningShrimp/master
There was a problem hiding this comment.
Pull request overview
This pull request performs formatting normalization on the index.md file, which appears to be a comprehensive Chinese-language guide for AI/LLM application development interview preparation. The changes are purely cosmetic, removing inconsistent leading whitespace throughout the document while preserving proper markdown list indentation structure.
Key Changes:
- Normalized indentation and removed leading spaces from 1140 lines
- Maintained all original content, code examples, and markdown structure
- Ensured consistent formatting for improved readability and markdown parsing
💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.
| if msg.tool_calls: | ||
| for tc in msg.tool_calls: | ||
| if tc.function.name == "get_weather": | ||
| args = eval(tc.function.arguments) # 注意：生产中不要直接 eval，需用 json.loads |
There was a problem hiding this comment.
The use of eval on tc.function.arguments allows arbitrary Python code execution based on data coming directly from the model response, which can be influenced by user input or prompt injection. An attacker could craft tool call arguments like __import__('os').system('rm -rf /'), leading to remote code execution when eval runs. Replace eval with safe JSON parsing (e.g., json.loads(tc.function.arguments)) and ensure you validate the parsed fields against an allowlist of expected keys and types.
feat: Add sidebar TOC navigation, code block styling, and table design system