Peter Steinberger 3aa94afcfd fix(security): harden archive extraction (#16203) ...

* fix(browser): confine upload paths for file chooser

* fix(browser): sanitize suggested download filenames

* chore(lint): avoid control regex in download sanitizer

* test(browser): cover absolute escape paths

* docs(browser): update upload example path

* refactor(browser): centralize upload path confinement

* fix(infra): harden tmp dir selection

* fix(security): harden archive extraction

* fix(infra): harden tar extraction filter

2026-02-14 14:42:08 +01:00

..

browser-cli-actions-input

fix(security): harden archive extraction (#16203)

2026-02-14 14:42:08 +01:00

cron-cli

Centralize date/time formatting utilities (#11831)

2026-02-08 04:53:31 -08:00

daemon-cli

fix: ensure CLI exits after command completion (#12906)

2026-02-14 00:34:33 +01:00

gateway-cli

feat(gateway): add trusted-proxy auth mode (#15940)

2026-02-14 12:32:17 +01:00

node-cli

chore: Enable "experimentalSortImports" in Oxfmt and reformat all imorts.

2026-02-01 10:03:47 +09:00

nodes-cli

fix(gateway): bind system.run approvals to exec approvals

2026-02-14 13:27:45 +01:00

program

perf(cli): speed up startup

2026-02-14 12:21:44 +00:00

update-cli

refactor(cli): split update command modules

2026-02-13 19:08:37 +00:00

acp-cli.ts

fix: ensure CLI exits after command completion (#12906)

2026-02-14 00:34:33 +01:00

argv.test.ts

perf(cli): reduce read-only startup overhead

2026-02-14 01:18:44 +00:00

argv.ts

perf(cli): reduce read-only startup overhead

2026-02-14 01:18:44 +00:00

banner.ts

chore: Enable "curly" rule to avoid single-statement if confusion/errors.

2026-01-31 16:19:20 +09:00

browser-cli-actions-input.ts

refactor(src): split oversized modules

2026-01-14 01:17:56 +00:00

browser-cli-actions-observe.ts

chore: Enable "experimentalSortImports" in Oxfmt and reformat all imorts.

2026-02-01 10:03:47 +09:00

browser-cli-debug.ts

Security/Browser: constrain trace and download output paths to OpenClaw temp roots (#15652)

2026-02-13 19:24:33 +00:00

browser-cli-examples.ts

fix(security): harden archive extraction (#16203)

2026-02-14 14:42:08 +01:00

browser-cli-extension.test.ts

perf(test): remove extra module resets in cli and message suites

2026-02-13 16:08:38 +00:00

browser-cli-extension.ts

perf(test): remove extra module resets in cli and message suites

2026-02-13 16:08:38 +00:00

browser-cli-inspect.test.ts

chore: Enable "experimentalSortImports" in Oxfmt and reformat all imorts.

2026-02-01 10:03:47 +09:00

browser-cli-inspect.ts

chore: Enable "experimentalSortImports" in Oxfmt and reformat all imorts.

2026-02-01 10:03:47 +09:00

browser-cli-manage.ts

refactor: rename to openclaw

2026-01-30 03:16:21 +01:00

browser-cli-shared.ts

chore: Enable "curly" rule to avoid single-statement if confusion/errors.

2026-01-31 16:19:20 +09:00

browser-cli-state.cookies-storage.ts

chore: Enable "experimentalSortImports" in Oxfmt and reformat all imorts.

2026-02-01 10:03:47 +09:00

browser-cli-state.ts

chore: Enable "experimentalSortImports" in Oxfmt and reformat all imorts.

2026-02-01 10:03:47 +09:00

browser-cli.test.ts

revert: Switch back to tsc for compiling.

2026-01-31 18:31:49 +09:00

browser-cli.ts

chore: Enable "experimentalSortImports" in Oxfmt and reformat all imorts.

2026-02-01 10:03:47 +09:00

channel-auth.ts

chore: migrate to oxlint and oxfmt

2026-01-14 15:02:19 +00:00

channel-options.ts

chore: Enable "experimentalSortImports" in Oxfmt and reformat all imorts.

2026-02-01 10:03:47 +09:00

channels-cli.ts

chore: Enable "experimentalSortImports" in Oxfmt and reformat all imorts.

2026-02-01 10:03:47 +09:00

cli-name.ts

chore: Enable "curly" rule to avoid single-statement if confusion/errors.

2026-01-31 16:19:20 +09:00

cli-utils.ts

refactor: consolidate duplicate utility functions (#12439)

2026-02-08 23:59:43 -08:00

command-format.ts

chore: Enable "experimentalSortImports" in Oxfmt and reformat all imorts.

2026-02-01 10:03:47 +09:00

command-options.ts

chore: migrate to oxlint and oxfmt

2026-01-14 15:02:19 +00:00

completion-cli.ts

perf(cli): speed up startup

2026-02-14 12:21:44 +00:00

config-cli.test.ts

perf(test): remove extra module resets in cli and message suites

2026-02-13 16:08:38 +00:00

config-cli.ts

perf(cli): speed up help/config paths and route config get/unset

2026-02-14 00:27:35 +00:00

cron-cli.test.ts

perf(test): reduce hot-suite import and setup overhead

2026-02-13 20:26:39 +00:00

cron-cli.ts

refactor(src): split oversized modules

2026-01-14 01:17:56 +00:00

daemon-cli-compat.test.ts

fix(update): repair daemon-cli compat exports after self-update

2026-02-13 04:08:13 +01:00

daemon-cli-compat.ts

fix: stabilize test runner and daemon-cli compat

2026-02-13 04:45:04 +00:00

daemon-cli.coverage.e2e.test.ts

test: migrate suites to e2e coverage layout

2026-02-13 14:28:22 +00:00

daemon-cli.ts

refactor(src): split oversized modules

2026-01-14 01:17:56 +00:00

deps.test.ts

fix: ensure CLI exits after command completion (#12906)

2026-02-14 00:34:33 +01:00

deps.ts

fix: ensure CLI exits after command completion (#12906)

2026-02-14 00:34:33 +01:00

devices-cli.ts

Centralize date/time formatting utilities (#11831)

2026-02-08 04:53:31 -08:00

directory-cli.ts

chore: Enable no-unnecessary-template-expression lint rule.

2026-02-02 15:37:05 +09:00

dns-cli.test.ts

refactor: rename to openclaw

2026-01-30 03:16:21 +01:00

dns-cli.ts

chore: Enable "experimentalSortImports" in Oxfmt and reformat all imorts.

2026-02-01 10:03:47 +09:00

docs-cli.ts

chore: Enable "experimentalSortImports" in Oxfmt and reformat all imorts.

2026-02-01 10:03:47 +09:00

exec-approvals-cli.test.ts

perf(test): cut setup/import overhead in hot suites

2026-02-13 21:23:50 +00:00

exec-approvals-cli.ts

Centralize date/time formatting utilities (#11831)

2026-02-08 04:53:31 -08:00

gateway-cli.coverage.e2e.test.ts

perf(test): replace module resets with direct spies and runtime seams

2026-02-13 16:04:49 +00:00

gateway-cli.ts

refactor(src): split oversized modules

2026-01-14 01:17:56 +00:00

gateway-rpc.ts

fix(cron): fix timeout, add timestamp validation, enable file sync

2026-02-04 01:03:59 -08:00

gateway.sigterm.e2e.test.ts

test: migrate suites to e2e coverage layout

2026-02-13 14:28:22 +00:00

help-format.ts

chore: Enable "curly" rule to avoid single-statement if confusion/errors.

2026-01-31 16:19:20 +09:00

hooks-cli.test.ts

fix(docs): update outdated hooks documentation URLs (#16165)

2026-02-14 13:05:37 +01:00

hooks-cli.ts

fix: harden plugin and hook install paths

2026-02-02 02:07:47 -08:00

logs-cli.test.ts

fix: local-time timestamps include offset (#14771) (thanks @0xRaini)

2026-02-12 19:09:20 +01:00

logs-cli.ts

fix: local-time timestamps include offset (#14771) (thanks @0xRaini)

2026-02-12 19:09:20 +01:00

memory-cli.test.ts

fix(memory/qmd): throttle embed + citations auto + restore --force

2026-02-02 23:45:05 -08:00

memory-cli.ts

chore: apply formatter

2026-02-02 23:45:05 -08:00

models-cli.test.ts

test: migrate suites to e2e coverage layout

2026-02-13 14:28:22 +00:00

models-cli.ts

chore: Enable "experimentalSortImports" in Oxfmt and reformat all imorts.

2026-02-01 10:03:47 +09:00

node-cli.ts

fix: resolve ci failures

2026-01-18 08:45:29 +00:00

nodes-camera.test.ts

feat: Android companion app improvements & gateway URL camera payloads (#13541)

2026-02-13 16:49:28 +01:00

nodes-camera.ts

feat: Android companion app improvements & gateway URL camera payloads (#13541)

2026-02-13 16:49:28 +01:00

nodes-canvas.test.ts

chore: Enable "experimentalSortImports" in Oxfmt and reformat all imorts.

2026-02-01 10:03:47 +09:00

nodes-canvas.ts

chore: Enable "experimentalSortImports" in Oxfmt and reformat all imorts.

2026-02-01 10:03:47 +09:00

nodes-cli.coverage.test.ts

fix(gateway): bind system.run approvals to exec approvals

2026-02-14 13:27:45 +01:00

nodes-cli.ts

refactor(src): split oversized modules

2026-01-14 01:17:56 +00:00

nodes-run.ts

chore: Enable "curly" rule to avoid single-statement if confusion/errors.

2026-01-31 16:19:20 +09:00

nodes-screen.test.ts

chore: Enable "experimentalSortImports" in Oxfmt and reformat all imorts.

2026-02-01 10:03:47 +09:00

nodes-screen.ts

chore: Enable "experimentalSortImports" in Oxfmt and reformat all imorts.

2026-02-01 10:03:47 +09:00

outbound-send-deps.ts

style: oxfmt format

2026-01-17 05:48:56 +00:00

pairing-cli.test.ts

chore: Enable "curly" rule to avoid single-statement if confusion/errors.

2026-01-31 16:19:20 +09:00

pairing-cli.ts

chore: Enable "experimentalSortImports" in Oxfmt and reformat all imorts.

2026-02-01 10:03:47 +09:00

parse-bytes.test.ts

fix: unify session maintenance and cron run pruning (#13083)

2026-02-09 20:42:35 -08:00

parse-bytes.ts

fix: unify session maintenance and cron run pruning (#13083)

2026-02-09 20:42:35 -08:00

parse-duration.test.ts

chore: Enable "experimentalSortImports" in Oxfmt and reformat all imorts.

2026-02-01 10:03:47 +09:00

parse-duration.ts

chore: Enable "curly" rule to avoid single-statement if confusion/errors.

2026-01-31 16:19:20 +09:00

parse-timeout.ts

chore: Enable "curly" rule to avoid single-statement if confusion/errors.

2026-01-31 16:19:20 +09:00

plugin-registry.ts

perf(test): speed up vitest by skipping plugins + LLM slug

2026-02-12 17:15:43 +00:00

plugins-cli.ts

CLI: add plugins uninstall command (#5985) (openclaw#6141) thanks @JustasMonkev

2026-02-12 20:11:26 -06:00

ports.ts

chore: We have a sleep at home. The sleep at home:

2026-02-02 21:44:02 +09:00

profile-utils.ts

chore: Enable "curly" rule to avoid single-statement if confusion/errors.

2026-01-31 16:19:20 +09:00

profile.test.ts

fix(paths): structurally resolve home dir to prevent Windows path bugs (#12125)

2026-02-08 20:06:29 -05:00

profile.ts

fix(paths): respect OPENCLAW_HOME for all internal path resolution (#12091)

2026-02-08 16:20:13 -05:00

program.force.test.ts

chore: Enable "curly" rule to avoid single-statement if confusion/errors.

2026-01-31 16:19:20 +09:00

program.nodes-basic.e2e.test.ts

test: migrate suites to e2e coverage layout

2026-02-13 14:28:22 +00:00

program.nodes-media.e2e.test.ts

feat: Android companion app improvements & gateway URL camera payloads (#13541)

2026-02-13 16:49:28 +01:00

program.smoke.e2e.test.ts

test: migrate suites to e2e coverage layout

2026-02-13 14:28:22 +00:00

program.ts

refactor(src): split oversized modules

2026-01-14 01:17:56 +00:00

progress.test.ts

chore: Enable "experimentalSortImports" in Oxfmt and reformat all imorts.

2026-02-01 10:03:47 +09:00

progress.ts

chore: Enable "experimentalSortImports" in Oxfmt and reformat all imorts.

2026-02-01 10:03:47 +09:00

prompt.test.ts

chore: Enable "experimentalSortImports" in Oxfmt and reformat all imorts.

2026-02-01 10:03:47 +09:00

prompt.ts

chore: Enable "experimentalSortImports" in Oxfmt and reformat all imorts.

2026-02-01 10:03:47 +09:00

respawn-policy.test.ts

perf(cli): speed up help/config paths and route config get/unset

2026-02-14 00:27:35 +00:00

respawn-policy.ts

perf(cli): speed up help/config paths and route config get/unset

2026-02-14 00:27:35 +00:00

route.ts

perf(cli): slim route-first bootstrap with lazy route handlers

2026-02-14 00:12:23 +00:00

run-main.exit.test.ts

fix: ensure CLI exits after command completion (#12906)

2026-02-14 00:34:33 +01:00

run-main.test.ts

perf(cli): reduce read-only startup overhead

2026-02-14 01:18:44 +00:00

run-main.ts

perf(cli): speed up startup

2026-02-14 12:21:44 +00:00

sandbox-cli.ts

chore: Enable "experimentalSortImports" in Oxfmt and reformat all imorts.

2026-02-01 10:03:47 +09:00

security-cli.ts

chore: Enable "experimentalSortImports" in Oxfmt and reformat all imorts.

2026-02-01 10:03:47 +09:00

skills-cli.test.ts

fix(ui): fix web UI after tsdown migration and typing changes

2026-02-03 13:56:20 -05:00

skills-cli.ts

fix(ui): fix web UI after tsdown migration and typing changes

2026-02-03 13:56:20 -05:00

system-cli.ts

chore: Enable "experimentalSortImports" in Oxfmt and reformat all imorts.

2026-02-01 10:03:47 +09:00

tagline.ts

chore: Enable "curly" rule to avoid single-statement if confusion/errors.

2026-01-31 16:19:20 +09:00

tui-cli.ts

refactor: rename to openclaw

2026-01-30 03:16:21 +01:00

update-cli.test.ts

perf(test): cut setup/import overhead in hot suites

2026-02-13 21:23:50 +00:00

update-cli.ts

refactor(cli): split update command modules

2026-02-13 19:08:37 +00:00

wait.test.ts

chore: Enable "experimentalSortImports" in Oxfmt and reformat all imorts.

2026-02-01 10:03:47 +09:00

wait.ts

chore: format to 2-space and bump changelog

2025-11-26 00:53:53 +01:00

webhooks-cli.ts

chore: Enable "experimentalSortImports" in Oxfmt and reformat all imorts.

2026-02-01 10:03:47 +09:00