admin/Moltbot
1
0
Fork 0
Code Issues Pull Requests Actions 1 Packages Projects Releases Wiki Activity

refactor(security): share safe temp media path builder (#20810)

Browse Source 
Merged via /review-pr -> /prepare-pr -> /merge-pr.

Prepared head SHA: 7a088e6801d4ec45858ba47d20a8c8615ba35389
Co-authored-by: mbelinky <132747814+mbelinky@users.noreply.github.com>
Co-authored-by: mbelinky <132747814+mbelinky@users.noreply.github.com>
Reviewed-by: @mbelinky
This commit is contained in:
Mariano
2026-02-19 09:59:21 +00:00
committed by GitHub
parent ee1d6427b5
commit a7c0aa94d9
6 changed files with 78 additions and 13 deletions
Download Patch File Download Diff File Expand all files Collapse all files

8
extensions/feishu/src/media.ts
View File

@@ -1,9 +1,7 @@
import fs from "fs";
import crypto from "node:crypto";
import os from "os";
import path from "path";
import { Readable } from "stream";
import type { ClawdbotConfig } from "openclaw/plugin-sdk";
import { buildRandomTempFilePath, type ClawdbotConfig } from "openclaw/plugin-sdk";
import { resolveFeishuAccount } from "./accounts.js";
import { createFeishuClient } from "./client.js";
import { getFeishuRuntime } from "./runtime.js";
@@ -100,7 +98,7 @@ export async function downloadImageFeishu(params: {
path: { image_key: imageKey },
});
const tmpPath = path.join(os.tmpdir(), `feishu_img_${Date.now()}_${crypto.randomUUID()}`);
const tmpPath = buildRandomTempFilePath({ prefix: "feishu_img" });
const buffer = await readFeishuResponseBuffer({
response,
tmpPath,
@@ -133,7 +131,7 @@ export async function downloadMessageResourceFeishu(params: {
params: { type },
});
const tmpPath = path.join(os.tmpdir(), `feishu_${Date.now()}_${crypto.randomUUID()}`);
const tmpPath = buildRandomTempFilePath({ prefix: "feishu" });
const buffer = await readFeishuResponseBuffer({
response,
tmpPath,