escape value when adding param and add missing verbs

Author: SamSaffron

lib/ai_bot/tools/tool.rb

@@ -188,6 +188,12 @@ def self.send_http_request(
             request = FinalDestination::HTTP::Get.new(uri)
           elsif method == :post
             request = FinalDestination::HTTP::Post.new(uri)
+          elsif method == :put
+            request = FinalDestination::HTTP::Put.new(uri)
+          elsif method == :patch
+            request = FinalDestination::HTTP::Patch.new(uri)
+          elsif method == :delete
+            request = FinalDestination::HTTP::Delete.new(uri)
           end
 
           raise ArgumentError, "Invalid method: #{method}" if !request

lib/completions/anthropic_message_processor.rb

@@ -39,7 +39,8 @@ def to_xml_tool_calls(function_buffer)
         )
 
       params = JSON.parse(tool_call.raw_json, symbolize_names: true)
-      xml = params.map { |name, value| "<#{name}>#{value}</#{name}>" }.join("\n")
+      xml = params.map { |name, value| "<#{name}>#{CGI.escapeHTML(value)}</#{name}>" }.join("\n")
+
 
       node.at("tool_name").content = tool_call.name
       node.at("tool_id").content = tool_call.id