Josh Avant
|
1c200ca7ae
|
follow-up: align ingress, atomic paths, and channel tests with credential semantics (#33733)
Merged via squash.
Prepared head SHA: c290c2ab6a
Co-authored-by: joshavant <830519+joshavant@users.noreply.github.com>
Co-authored-by: joshavant <830519+joshavant@users.noreply.github.com>
Reviewed-by: @joshavant
|
2026-03-03 20:29:46 -06:00 |
|
Peter Steinberger
|
104d32bb64
|
fix(security): unify root-bound write hardening
|
2026-03-02 17:12:33 +00:00 |
|
Peter Steinberger
|
2d31126e6a
|
refactor(shared): extract reused path and normalization helpers
|
2026-03-02 05:20:19 +00:00 |
|
Peter Steinberger
|
6a80e9db05
|
fix(browser): harden writable output paths
|
2026-03-01 23:25:13 +00:00 |
|
Peter Steinberger
|
ef326f5cd0
|
fix(browser): revalidate upload paths at use time
|
2026-02-26 00:40:56 +01:00 |
|
Peter Steinberger
|
e103323014
|
refactor(browser): share playwright download wait/save flow
|
2026-02-18 18:25:25 +00:00 |
|
Peter Steinberger
|
b8b43175c5
|
style: align formatting with oxfmt 0.33
|
2026-02-18 01:34:35 +00:00 |
|
Peter Steinberger
|
31f9be126c
|
style: run oxfmt and fix gate failures
|
2026-02-18 01:29:02 +00:00 |
|
cpojer
|
d0cb8c19b2
|
chore: wtf.
|
2026-02-17 13:36:48 +09:00 |
|
Sebastian
|
ed11e93cf2
|
chore(format)
|
2026-02-16 23:20:16 -05:00 |
|
cpojer
|
90ef2d6bdf
|
chore: Update formatting.
|
2026-02-17 09:18:40 +09:00 |
|
Peter Steinberger
|
3aa94afcfd
|
fix(security): harden archive extraction (#16203)
* fix(browser): confine upload paths for file chooser
* fix(browser): sanitize suggested download filenames
* chore(lint): avoid control regex in download sanitizer
* test(browser): cover absolute escape paths
* docs(browser): update upload example path
* refactor(browser): centralize upload path confinement
* fix(infra): harden tmp dir selection
* fix(security): harden archive extraction
* fix(infra): harden tar extraction filter
|
2026-02-14 14:42:08 +01:00 |
|
Gustavo Madeira Santana
|
b02c88d3e7
|
Browser/Logging: share default openclaw tmp dir resolver
|
2026-02-12 16:44:04 -05:00 |
|
Gustavo Madeira Santana
|
afbce73570
|
fix: use os.tmpdir fallback paths for temp files (#14985)
Merged via /review-pr -> /prepare-pr -> /merge-pr.
Prepared head SHA: 347c689407
Co-authored-by: gumadeiras <5599352+gumadeiras@users.noreply.github.com>
Co-authored-by: gumadeiras <5599352+gumadeiras@users.noreply.github.com>
Reviewed-by: @gumadeiras
|
2026-02-12 16:08:41 -05:00 |
|
cpojer
|
f06dd8df06
|
chore: Enable "experimentalSortImports" in Oxfmt and reformat all imorts.
|
2026-02-01 10:03:47 +09:00 |
|
cpojer
|
5ceff756e1
|
chore: Enable "curly" rule to avoid single-statement if confusion/errors.
|
2026-01-31 16:19:20 +09:00 |
|
Peter Steinberger
|
9a7160786a
|
refactor: rename to openclaw
|
2026-01-30 03:16:21 +01:00 |
|
Peter Steinberger
|
6d16a658e5
|
refactor: rename clawdbot to moltbot with legacy compat
|
2026-01-27 12:21:02 +00:00 |
|
Peter Steinberger
|
d5d33d4848
|
fix(browser): persist role refs per targetId
|
2026-01-15 09:56:24 +00:00 |
|
Peter Steinberger
|
c379191f80
|
chore: migrate to oxlint and oxfmt
Co-authored-by: Christoph Nakazawa <christoph.pojer@gmail.com>
|
2026-01-14 15:02:19 +00:00 |
|
Peter Steinberger
|
2b60ee96f2
|
refactor(browser): split pw tools + agent routes
|
2026-01-14 05:39:44 +00:00 |
|