vultr/openclaw
1
0
Fork 0
mirror of https://github.com/openclaw/openclaw.git synced 2026-05-06 16:50:43 +00:00
Code Issues Packages Projects Releases Wiki Activity

fix(security): block MINIMAX_API_HOST workspace env injection and remove env-driven URL routing [AI-assisted] (#67300)

Browse Source 
* fix: address issue

* fix: address review feedback

* fix: finalize issue changes

* fix: address PR review feedback

* address review feedback

* docs: add changelog entry for PR merge
This commit is contained in:
Pavan Kumar Gondhi
2026-04-20 22:51:03 +05:30
committed by GitHub
parent 99a896797f
commit 2f06696579
5 changed files with 67 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
extensions/minimax/speech-provider.test.ts
View File

@@ -86,7 +86,7 @@ describe("buildMinimaxSpeechProvider", () => {
expect(config.pitch).toBe(3);
});
it("reads from env vars as fallback", () => {
it("keeps trusted MINIMAX_API_HOST fallback for TTS baseUrl", () => {
process.env.MINIMAX_API_HOST = "https://env.api.com";
process.env.MINIMAX_TTS_MODEL = "speech-01-240228";
process.env.MINIMAX_TTS_VOICE_ID = "Chinese (Mandarin)_Gentle_Boy";