vultr/openclaw
1
0
Fork 0
mirror of https://github.com/openclaw/openclaw.git synced 2026-04-27 09:02:15 +00:00
Code Issues Packages Projects Releases Wiki Activity

fix(security): harden discord proxy and bundled channel activation (#60455)

Browse Source 
* fix(security): tighten discord proxy and mobile tls guards

* fix(plugins): enforce allowlists for bundled channels

* fix(types): align callers with removed legacy config aliases

* fix(security): preserve bundled channel opt-in and ipv6 proxies
This commit is contained in:
Vincent Koc
2026-04-04 02:48:52 +09:00
committed by GitHub
parent 3ddf745f97
commit 50e1eb56d7
16 changed files with 266 additions and 44 deletions
Download Patch File Download Diff File Expand all files Collapse all files

7
src/plugins/loader.test.ts
View File

@@ -731,7 +731,7 @@ describe("loadOpenClawPlugins", () => {
},
},
{
name: "loads bundled channel plugins when channels.<id>.enabled=true even if plugins.allow excludes them",
name: "keeps bundled channel plugins behind restrictive allowlists even when channels.<id>.enabled=true",
config: {
channels: {
telegram: {
@@ -743,7 +743,10 @@ describe("loadOpenClawPlugins", () => {
},
} satisfies PluginLoadConfig,
assert: (registry: ReturnType<typeof loadOpenClawPlugins>) => {
expectTelegramLoaded(registry);
const telegram = registry.plugins.find((entry) => entry.id === "telegram");
expect(telegram?.status).toBe("disabled");
expect(telegram?.error).toBe("not in allowlist");
expect(telegram?.explicitlyEnabled).toBe(true);
},
},
{