2 Commits

Author	SHA1	Message	Date
Peter Steinberger	3aa94afcfd	fix(security): harden archive extraction (#16203) ... * fix(browser): confine upload paths for file chooser * fix(browser): sanitize suggested download filenames * chore(lint): avoid control regex in download sanitizer * test(browser): cover absolute escape paths * docs(browser): update upload example path * refactor(browser): centralize upload path confinement * fix(infra): harden tmp dir selection * fix(security): harden archive extraction * fix(infra): harden tar extraction filter	2026-02-14 14:42:08 +01:00
Mariano	7f0489e473	Security/Browser: constrain trace and download output paths to OpenClaw temp roots (#15652) ... * Browser/Security: constrain trace and download output paths to temp roots * Changelog: remove advisory ID from pre-public security note * Browser/Security: constrain trace and download output paths to temp roots * Changelog: remove advisory ID from pre-public security note * test(bluebubbles): align timeout status expectation to 408 * test(discord): remove unused race-condition counter in threading test * test(bluebubbles): align timeout status expectation to 408	2026-02-13 19:24:33 +00:00