github/openclaw
1
0
Fork 0
mirror of https://github.com/openclaw/openclaw.git synced 2026-05-08 12:21:24 +00:00
Code Issues Packages Projects Releases Wiki Activity

fix(gateway): block node.invoke exec approvals

Browse Source
This commit is contained in:
Peter Steinberger
2026-02-14 19:21:31 +01:00
parent d0f64c955e
commit 01b3226ecb
4 changed files with 46 additions and 8 deletions
Download Patch File Download Diff File Expand all files Collapse all files

12
src/gateway/server-methods/nodes.ts
View File

@@ -388,6 +388,18 @@ export const nodeHandlers: GatewayRequestHandlers = {
);
return;
}
if (command === "system.execApprovals.get" || command === "system.execApprovals.set") {
respond(
false,
undefined,
errorShape(
ErrorCodes.INVALID_REQUEST,
"node.invoke does not allow system.execApprovals.*; use exec.approvals.node.*",
{ details: { command } },
),
);
return;
}
await respondUnavailableOnThrow(respond, async () => {
const nodeSession = context.nodeRegistry.get(nodeId);