github/openclaw
1
0
Fork 0
mirror of https://github.com/openclaw/openclaw.git synced 2026-05-30 07:15:04 +00:00
Code Issues Packages Projects Releases Wiki Activity

fix(auto-reply): prevent sender spoofing in group prompts

Browse Source
This commit is contained in:
Peter Steinberger
2026-02-10 00:35:56 -06:00
parent 8ff1618bfc
commit 53273b490b
42 changed files with 405 additions and 243 deletions
Download Patch File Download Diff File Expand all files Collapse all files

13
extensions/feishu/src/bot.ts
View File

@@ -799,6 +799,7 @@ export async function handleFeishuMessage(params: {
const permissionCtx = core.channel.reply.finalizeInboundContext({
Body: permissionBody,
BodyForAgent: permissionNotifyBody,
RawBody: permissionNotifyBody,
CommandBody: permissionNotifyBody,
From: feishuFrom,
@@ -873,8 +874,19 @@ export async function handleFeishuMessage(params: {
});
}
const inboundHistory =
isGroup && historyKey && historyLimit > 0 && chatHistories
? (chatHistories.get(historyKey) ?? []).map((entry) => ({
sender: entry.sender,
body: entry.body,
timestamp: entry.timestamp,
}))
: undefined;
const ctxPayload = core.channel.reply.finalizeInboundContext({
Body: combinedBody,
BodyForAgent: ctx.content,
InboundHistory: inboundHistory,
RawBody: ctx.content,
CommandBody: ctx.content,
From: feishuFrom,
@@ -888,6 +900,7 @@ export async function handleFeishuMessage(params: {
Provider: "feishu" as const,
Surface: "feishu" as const,
MessageSid: ctx.messageId,
ReplyToBody: quotedContent ?? undefined,
Timestamp: Date.now(),
WasMentioned: ctx.mentionedBot,
CommandAuthorized: true,