github/openclaw
1
0
Fork 0
mirror of https://github.com/openclaw/openclaw.git synced 2026-04-30 22:01:46 +00:00
Code Issues Packages Projects Releases Wiki Activity

fix(security): restore trusted plugin runtime exec default

Browse Source
This commit is contained in:
Peter Steinberger
2026-02-19 16:01:22 +01:00
parent 8288702f51
commit 2e421f32df
9 changed files with 17 additions and 84 deletions
Download Patch File Download Diff File Expand all files Collapse all files

9
src/config/types.plugins.ts
View File

@@ -13,14 +13,6 @@ export type PluginsLoadConfig = {
paths?: string[];
};
export type PluginsRuntimeConfig = {
/**
* Re-enable deprecated runtime.system.runCommandWithTimeout for legacy plugins.
* Disabled by default for security hardening.
*/
allowLegacyExec?: boolean;
};
export type PluginInstallRecord = {
source: "npm" | "archive" | "path";
spec?: string;
@@ -44,7 +36,6 @@ export type PluginsConfig = {
/** Optional plugin denylist (plugin ids). */
deny?: string[];
load?: PluginsLoadConfig;
runtime?: PluginsRuntimeConfig;
slots?: PluginSlotsConfig;
entries?: Record<string, PluginEntryConfig>;
installs?: Record<string, PluginInstallRecord>;