build: prepare 2026.3.11 release

This commit is contained in:
Peter Steinberger
2026-03-12 05:01:01 +00:00
parent c65390cbde
commit 29dc65403f
4 changed files with 9 additions and 3 deletions

View File

@@ -4,6 +4,12 @@ Docs: https://docs.openclaw.ai
## Unreleased
### Changes
### Fixes
## 2026.3.11
### Security
- Gateway/WebSocket: enforce browser origin validation for all browser-originated connections regardless of whether proxy headers are present, closing a cross-site WebSocket hijacking path in `trusted-proxy` mode that could grant untrusted origins `operator.admin` access. (GHSA-5wcw-8jjv-m286)