Peter Steinberger
|
d06ad6bc55
|
chore: remove verified dead code paths
|
2026-02-22 09:21:09 +01:00 |
|
Peter Steinberger
|
d51929ecb5
|
fix: block ISATAP SSRF bypass via shared host/ip guard
|
2026-02-19 09:59:47 +01:00 |
|
Peter Steinberger
|
b8b43175c5
|
style: align formatting with oxfmt 0.33
|
2026-02-18 01:34:35 +00:00 |
|
Peter Steinberger
|
31f9be126c
|
style: run oxfmt and fix gate failures
|
2026-02-18 01:29:02 +00:00 |
|
cpojer
|
d0cb8c19b2
|
chore: wtf.
|
2026-02-17 13:36:48 +09:00 |
|
Sebastian
|
ed11e93cf2
|
chore(format)
|
2026-02-16 23:20:16 -05:00 |
|
cpojer
|
90ef2d6bdf
|
chore: Update formatting.
|
2026-02-17 09:18:40 +09:00 |
|
AI-Reviewer-QS
|
649826e435
|
fix(security): block private/loopback/metadata IPs in link-understanding URL detection (#15604)
* fix(security): block private/loopback/metadata IPs in link-understanding URL detection
isAllowedUrl() only blocked 127.0.0.1, leaving localhost, ::1, 0.0.0.0,
private RFC1918 ranges, link-local (169.254.x.x including cloud metadata),
and CGNAT (100.64.0.0/10) accessible for SSRF via link-understanding.
Add comprehensive hostname/IP blocking consistent with the SSRF guard
already used by media/fetch.ts.
* fix(security): harden link-understanding SSRF host checks
* fix: note link-understanding SSRF hardening in changelog (#15604) (thanks @AI-Reviewer-QS)
---------
Co-authored-by: Yi LIU <yi@quantstamp.com>
Co-authored-by: Peter Steinberger <steipete@gmail.com>
|
2026-02-13 18:38:40 +01:00 |
|
cpojer
|
f06dd8df06
|
chore: Enable "experimentalSortImports" in Oxfmt and reformat all imorts.
|
2026-02-01 10:03:47 +09:00 |
|
cpojer
|
5ceff756e1
|
chore: Enable "curly" rule to avoid single-statement if confusion/errors.
|
2026-01-31 16:19:20 +09:00 |
|
Peter Steinberger
|
9a7160786a
|
refactor: rename to openclaw
|
2026-01-30 03:16:21 +01:00 |
|
Peter Steinberger
|
6d16a658e5
|
refactor: rename clawdbot to moltbot with legacy compat
|
2026-01-27 12:21:02 +00:00 |
|
Richard Pinedo
|
426168a338
|
Add link understanding tool support (#1637)
* Add
* Fix
---------
Co-authored-by: Richard <dasilva333@DESKTOP-74E3GJO.localdomain>
|
2026-01-25 00:15:54 +00:00 |
|