github/openclaw
1
0
Fork 0
mirror of https://github.com/openclaw/openclaw.git synced 2026-05-09 11:07:41 +00:00
Code Issues Packages Projects Releases Wiki Activity

fix: land security audit severity + temp-path guard fixes (#23428) (thanks @bmendonca3)

Browse Source
This commit is contained in:
Peter Steinberger
2026-02-22 11:05:27 +01:00
parent bc78b343ba
commit 29e41d4c0a
5 changed files with 78 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

34
src/security/audit.test.ts
View File

@@ -1009,6 +1009,40 @@ describe("security audit", () => {
},
expectedSeverity: "critical",
},
{
name: "loopback trusted-proxy with loopback-only proxies",
cfg: {
gateway: {
bind: "loopback",
allowRealIpFallback: true,
trustedProxies: ["127.0.0.1"],
auth: {
mode: "trusted-proxy",
trustedProxy: {
userHeader: "x-forwarded-user",
},
},
},
},
expectedSeverity: "warn",
},
{
name: "loopback trusted-proxy with non-loopback proxy range",
cfg: {
gateway: {
bind: "loopback",
allowRealIpFallback: true,
trustedProxies: ["127.0.0.1", "10.0.0.0/8"],
auth: {
mode: "trusted-proxy",
trustedProxy: {
userHeader: "x-forwarded-user",
},
},
},
},
expectedSeverity: "critical",
},
];
for (const testCase of cases) {