Mariano 71f357d949 bluebubbles: harden local media path handling against LFI (#16322) ...

* bluebubbles: harden local media path handling

* bluebubbles: remove racy post-open symlink lstat

* fix: bluebubbles mediaLocalRoots docs + typing fix (#16322) (thanks @mbelinky)

2026-02-14 17:43:44 +00:00

..

acp

refactor(security): centralize dangerous tool lists

2026-02-14 13:27:05 +01:00

agents

refactor(agents): dedupe transient error copy (#16324)

2026-02-14 17:49:25 +01:00

auto-reply

perf(test): remove fs skill scanning from skill-commands tests

2026-02-14 16:36:15 +00:00

browser

test(browser): add file-chooser traversal regression

2026-02-14 18:20:20 +01:00

canvas-host

refactor(canvas-host): share static file resolver

2026-02-14 15:39:45 +00:00

channels

feat(telegram): add sendPoll support (#16193) (#16209)

2026-02-14 18:34:30 +01:00

cli

feat(telegram): add sendPoll support (#16193) (#16209)

2026-02-14 18:34:30 +01:00

commands

fix(test-harness): annotate vitest mocks to avoid TS2742

2026-02-14 18:26:46 +01:00

compat

refactor: rename to openclaw

2026-01-30 03:16:21 +01:00

config

bluebubbles: harden local media path handling against LFI (#16322)

2026-02-14 17:43:44 +00:00

cron

refactor(outbound): centralize outbound identity

2026-02-14 16:44:43 +01:00

daemon

refactor(daemon): share schtasks exec helper

2026-02-14 15:39:45 +00:00

discord

feat(telegram): add sendPoll support (#16193) (#16209)

2026-02-14 18:34:30 +01:00

docs

Docs: landing page revamp (#8885)

2026-02-04 10:37:14 -05:00

gateway

feat(telegram): add sendPoll support (#16193) (#16209)

2026-02-14 18:34:30 +01:00

hooks

perf(test): cache hook installer fixtures

2026-02-14 16:36:15 +00:00

imessage

perf(test): gate monitor runtime logs during vitest

2026-02-14 01:14:56 +00:00

infra

feat(telegram): add sendPoll support (#16193) (#16209)

2026-02-14 18:34:30 +01:00

line

perf(test): speed up line, models list, and memory batch

2026-02-14 16:36:15 +00:00

link-understanding

fix(security): block private/loopback/metadata IPs in link-understanding URL detection (#15604)

2026-02-13 18:38:40 +01:00

logging

perf(test): reduce vitest logging overhead and media fixture cost

2026-02-14 00:59:53 +00:00

macos

refactor: unify gateway restart deferral and dispatcher cleanup

2026-02-14 00:38:18 +01:00

markdown

fix(signal): outbound formatting and markdown IR rendering improvements (#9781)

2026-02-14 16:57:20 +01:00

media

fix(security): reject oversized base64 before decode

2026-02-14 15:45:41 +01:00

media-understanding

refactor(media-understanding): share gemini inline-data helper

2026-02-14 15:39:46 +00:00

memory

perf(test): speed up memory suites

2026-02-14 16:36:15 +00:00

node-host

refactor(node-host): extract invoke handlers

2026-02-13 19:08:37 +00:00

pairing

perf: replace proper-lockfile with lightweight file locks

2026-02-13 17:57:30 +00:00

plugin-sdk

fix(security): harden tlon Urbit requests against SSRF

2026-02-14 18:42:10 +01:00

plugins

feat(telegram): add sendPoll support (#16193) (#16209)

2026-02-14 18:34:30 +01:00

process

perf(test): trim duplicate gateway and auto-reply test overhead

2026-02-13 23:40:38 +00:00

providers

perf(test): eliminate resetModules via injectable seams

2026-02-13 16:20:37 +00:00

routing

fix: add discord routing debug logging (#16202) (thanks @jayleekr)

2026-02-14 11:03:30 -06:00

scripts

chore: Enable "experimentalSortImports" in Oxfmt and reformat all imorts.

2026-02-01 10:03:47 +09:00

security

refactor(config): share include scan helper

2026-02-14 15:39:45 +00:00

sessions

fix: preserve inter-session input provenance (thanks @anbecker)

2026-02-13 02:02:01 +01:00

shared

perf(test): reduce skills + update + memory suite overhead

2026-02-14 16:36:15 +00:00

signal

fix(signal): outbound formatting and markdown IR rendering improvements (#9781)

2026-02-14 16:57:20 +01:00

slack

fix(signal): outbound formatting and markdown IR rendering improvements (#9781)

2026-02-14 16:57:20 +01:00

telegram

feat(telegram): add sendPoll support (#16193) (#16209)

2026-02-14 18:34:30 +01:00

terminal

refactor(health): share channel line styling

2026-02-14 15:39:45 +00:00

test-helpers

fix: use STATE_DIR instead of hardcoded ~/.openclaw for identity and canvas (#4824)

2026-02-07 22:16:59 -05:00

test-utils

perf(test): speed up Vitest bootstrap

2026-02-14 12:13:27 +00:00

tts

perf(test): speed up Vitest bootstrap

2026-02-14 12:13:27 +00:00

tui

fix(tui): use available terminal width for session name display (#16109) (#16238)

2026-02-14 18:39:05 +01:00

types

fix: update pi packages to 0.51.0, remove bogus type augmentation

2026-02-02 01:52:33 +01:00

utils

refactor(utils): share safe json stringify

2026-02-14 15:39:46 +00:00

web

feat(telegram): add sendPoll support (#16193) (#16209)

2026-02-14 18:34:30 +01:00

whatsapp

chore: Enable "experimentalSortImports" in Oxfmt and reformat all imorts.

2026-02-01 10:03:47 +09:00

wizard

fix(configure): reject literal "undefined" and "null" gateway auth tokens (#13767)

2026-02-13 17:04:41 +01:00

channel-web.barrel.test.ts

chore: Enable "experimentalSortImports" in Oxfmt and reformat all imorts.

2026-02-01 10:03:47 +09:00

channel-web.ts

refactor!: rename chat providers to channels

2026-01-13 08:40:39 +00:00

docker-setup.test.ts

perf(test): speed up hot test files

2026-02-14 02:55:39 +00:00

entry.ts

refactor(cli): share windows argv normalization

2026-02-14 15:39:46 +00:00

extensionAPI.ts

chore: Migrate to tsdown, speed up JS bundling by ~10x (thanks @hyf0).

2026-02-03 20:18:16 +09:00

globals.test.ts

chore: format to 2-space and bump changelog

2025-11-26 00:53:53 +01:00

globals.ts

chore: Enable "curly" rule to avoid single-statement if confusion/errors.

2026-01-31 16:19:20 +09:00

index.test.ts

chore: migrate to oxlint and oxfmt

2026-01-14 15:02:19 +00:00

index.ts

chore: Enable "experimentalSortImports" in Oxfmt and reformat all imorts.

2026-02-01 10:03:47 +09:00

logger.test.ts

perf(test): reduce vitest logging overhead and media fixture cost

2026-02-14 00:59:53 +00:00

logger.ts

chore: Enable "curly" rule to avoid single-statement if confusion/errors.

2026-01-31 16:19:20 +09:00

logging.ts

perf(test): eliminate resetModules via injectable seams

2026-02-13 16:20:37 +00:00

polls.test.ts

feat(telegram): add sendPoll support (#16193) (#16209)

2026-02-14 18:34:30 +01:00

polls.ts

feat(telegram): add sendPoll support (#16193) (#16209)

2026-02-14 18:34:30 +01:00

runtime.ts

perf(test): gate monitor runtime logs during vitest

2026-02-14 01:14:56 +00:00

utils.test.ts

fix(paths): structurally resolve home dir to prevent Windows path bugs (#12125)

2026-02-08 20:06:29 -05:00

utils.ts

Deduplicate more

2026-02-09 18:56:58 -08:00

version.test.ts

fix: CLI harden update restart imports and fix nested bundle version resolution

2026-02-06 00:09:48 -05:00

version.ts

fix: CLI harden update restart imports and fix nested bundle version resolution

2026-02-06 00:09:48 -05:00