chenglun.hu d46b489e21 fix(telegram): add timeout to file download to prevent DoS (CWE-400) ...

Add AbortSignal.timeout() to both fetch calls in download.ts to prevent
indefinite hangs when Telegram API is slow or unresponsive.

- getTelegramFile(): 30s timeout for metadata API call
- downloadTelegramFile(): 60s timeout for file download

Both functions now accept optional timeoutMs parameter for configurability.

Fixes #6849

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>

2026-02-02 13:39:39 +05:30

..

acp

chore: Enable "experimentalSortImports" in Oxfmt and reformat all imorts.

2026-02-01 10:03:47 +09:00

agents

chore: Enable typescript/no-explicit-any rule.

2026-02-02 16:18:09 +09:00

auto-reply

chore: Enable typescript/no-explicit-any rule.

2026-02-02 16:18:09 +09:00

browser

chore: Enable typescript/no-explicit-any rule.

2026-02-02 16:18:09 +09:00

canvas-host

chore: Enable "experimentalSortImports" in Oxfmt and reformat all imorts.

2026-02-01 10:03:47 +09:00

channels

chore: Enable typescript/no-explicit-any rule.

2026-02-02 16:18:09 +09:00

cli

chore: Enable no-unnecessary-template-expression lint rule.

2026-02-02 15:37:05 +09:00

commands

chore: Enable typescript/no-explicit-any rule.

2026-02-02 16:18:09 +09:00

compat

refactor: rename to openclaw

2026-01-30 03:16:21 +01:00

config

fix: cap context window resolution (#6187) (thanks @iamEvanYT)

2026-02-01 19:52:56 +05:30

cron

chore: Enable no-unnecessary-template-expression lint rule.

2026-02-02 15:37:05 +09:00

daemon

chore: Enable no-unnecessary-template-expression lint rule.

2026-02-02 15:37:05 +09:00

discord

chore: Enable typescript/no-explicit-any rule.

2026-02-02 16:18:09 +09:00

docs

chore: Enable "experimentalSortImports" in Oxfmt and reformat all imorts.

2026-02-01 10:03:47 +09:00

gateway

chore: Enable typescript/no-explicit-any rule.

2026-02-02 16:18:09 +09:00

hooks

chore: Enable typescript/no-explicit-any rule.

2026-02-02 16:18:09 +09:00

imessage

chore: Enable "experimentalSortImports" in Oxfmt and reformat all imorts.

2026-02-01 10:03:47 +09:00

infra

require TLS 1.3 as minimum

2026-02-01 15:14:11 -08:00

line

chore: Enable typescript/no-explicit-any rule.

2026-02-02 16:18:09 +09:00

link-understanding

chore: Enable "experimentalSortImports" in Oxfmt and reformat all imorts.

2026-02-01 10:03:47 +09:00

logging

chore: Enable "experimentalSortImports" in Oxfmt and reformat all imorts.

2026-02-01 10:03:47 +09:00

macos

chore: Enable "curly" rule to avoid single-statement if confusion/errors.

2026-01-31 16:19:20 +09:00

markdown

chore: Enable "experimentalSortImports" in Oxfmt and reformat all imorts.

2026-02-01 10:03:47 +09:00

media

chore: Enable "experimentalSortImports" in Oxfmt and reformat all imorts.

2026-02-01 10:03:47 +09:00

media-understanding

Security: harden web tools and file parsing (#4058)

2026-02-01 15:23:25 -08:00

memory

fix: L2-normalize local embedding vectors to fix semantic search (#5332)

2026-02-01 22:56:44 -05:00

node-host

chore: Enable "experimentalSortImports" in Oxfmt and reformat all imorts.

2026-02-01 10:03:47 +09:00

pairing

chore: Enable "experimentalSortImports" in Oxfmt and reformat all imorts.

2026-02-01 10:03:47 +09:00

plugin-sdk

chore: Enable "experimentalSortImports" in Oxfmt and reformat all imorts.

2026-02-01 10:03:47 +09:00

plugins

chore: Enable typescript/no-explicit-any rule.

2026-02-02 16:18:09 +09:00

process

fix: skip extension append if command already has one

2026-01-31 20:39:33 -06:00

providers

chore: Enable "experimentalSortImports" in Oxfmt and reformat all imorts.

2026-02-01 10:03:47 +09:00

routing

chore: fix lint, and format after lint to catch reformats triggered by autofixes.

2026-02-01 13:19:06 +09:00

scripts

chore: Enable "experimentalSortImports" in Oxfmt and reformat all imorts.

2026-02-01 10:03:47 +09:00

security

chore: Enable typescript/no-explicit-any rule.

2026-02-02 16:18:09 +09:00

sessions

chore: Enable "experimentalSortImports" in Oxfmt and reformat all imorts.

2026-02-01 10:03:47 +09:00

shared/text

chore: Enable "curly" rule to avoid single-statement if confusion/errors.

2026-01-31 16:19:20 +09:00

signal

chore: Enable typescript/no-explicit-any rule.

2026-02-02 16:18:09 +09:00

slack

chore: Enable typescript/no-explicit-any rule.

2026-02-02 16:18:09 +09:00

telegram

fix(telegram): add timeout to file download to prevent DoS (CWE-400)

2026-02-02 13:39:39 +05:30

terminal

chore: Enable "experimentalSortImports" in Oxfmt and reformat all imorts.

2026-02-01 10:03:47 +09:00

test-helpers

refactor: rename to openclaw

2026-01-30 03:16:21 +01:00

test-utils

chore: Enable "experimentalSortImports" in Oxfmt and reformat all imorts.

2026-02-01 10:03:47 +09:00

tts

chore: Enable "experimentalSortImports" in Oxfmt and reformat all imorts.

2026-02-01 10:03:47 +09:00

tui

chore: Enable typescript/no-explicit-any rule.

2026-02-02 16:18:09 +09:00

types

fix: update pi packages to 0.51.0, remove bogus type augmentation

2026-02-02 01:52:33 +01:00

utils

chore: Enable "experimentalSortImports" in Oxfmt and reformat all imorts.

2026-02-01 10:03:47 +09:00

web

chore: Enable typescript/no-explicit-any rule.

2026-02-02 16:18:09 +09:00

whatsapp

chore: Enable "experimentalSortImports" in Oxfmt and reformat all imorts.

2026-02-01 10:03:47 +09:00

wizard

chore: Enable "experimentalSortImports" in Oxfmt and reformat all imorts.

2026-02-01 10:03:47 +09:00

channel-web.barrel.test.ts

chore: Enable "experimentalSortImports" in Oxfmt and reformat all imorts.

2026-02-01 10:03:47 +09:00

channel-web.ts

refactor!: rename chat providers to channels

2026-01-13 08:40:39 +00:00

docker-setup.test.ts

refactor: rename to openclaw

2026-01-30 03:16:21 +01:00

entry.ts

chore: Enable "experimentalSortImports" in Oxfmt and reformat all imorts.

2026-02-01 10:03:47 +09:00

git-hooks.test.ts

chore: Enable "experimentalSortImports" in Oxfmt and reformat all imorts.

2026-02-01 10:03:47 +09:00

globals.test.ts

…

globals.ts

chore: Enable "curly" rule to avoid single-statement if confusion/errors.

2026-01-31 16:19:20 +09:00

index.test.ts

chore: migrate to oxlint and oxfmt

2026-01-14 15:02:19 +00:00

index.ts

chore: Enable "experimentalSortImports" in Oxfmt and reformat all imorts.

2026-02-01 10:03:47 +09:00

logger.test.ts

chore: Enable "experimentalSortImports" in Oxfmt and reformat all imorts.

2026-02-01 10:03:47 +09:00

logger.ts

chore: Enable "curly" rule to avoid single-statement if confusion/errors.

2026-01-31 16:19:20 +09:00

logging.ts

chore: Enable "experimentalSortImports" in Oxfmt and reformat all imorts.

2026-02-01 10:03:47 +09:00

polls.test.ts

chore: Enable "experimentalSortImports" in Oxfmt and reformat all imorts.

2026-02-01 10:03:47 +09:00

polls.ts

chore: migrate to oxlint and oxfmt

2026-01-14 15:02:19 +00:00

postinstall-patcher.test.ts

chore: Enable "experimentalSortImports" in Oxfmt and reformat all imorts.

2026-02-01 10:03:47 +09:00

runtime.ts

perf: speed up memory batch polling

2026-01-18 03:55:14 +00:00

utils.test.ts

chore: Enable typescript/no-explicit-any rule.

2026-02-02 16:18:09 +09:00

utils.ts

chore: Enable "curly" rule to avoid single-statement if confusion/errors.

2026-01-31 16:19:20 +09:00

version.ts

refactor: rename to openclaw

2026-01-30 03:16:21 +01:00