diff --git a/CHANGELOG.md b/CHANGELOG.md index a3266f19203..d40af7e6ccd 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -8,6 +8,7 @@ Docs: https://docs.openclaw.ai ### Fixes +- Android/security: stop `ASK_OPENCLAW` intents from auto-sending injected prompts, so external app actions only prefill the draft instead of dispatching it immediately. (#70714) Thanks @vincentkoc. - Control UI/chat: queue Stop-button aborts across Gateway reconnects so a disconnected active run is canceled on reconnect instead of only clearing local UI state. (#70673) Thanks @chinar-amrutkar. - QQBot/security: require framework auth for `/bot-approve` so unauthorized QQ senders cannot change exec approval settings through the unauthenticated pre-dispatch slash-command path. (#70706) Thanks @vincentkoc. - MCP/tools: stop the ACPX OpenClaw tools bridge from listing or invoking owner-only tools such as `cron`, closing a privilege-escalation path for non-owner MCP callers. (#70698) Thanks @vincentkoc. diff --git a/apps/android/app/src/main/java/ai/openclaw/app/AssistantLaunch.kt b/apps/android/app/src/main/java/ai/openclaw/app/AssistantLaunch.kt index 11978d83eed..e1bd409788f 100644 --- a/apps/android/app/src/main/java/ai/openclaw/app/AssistantLaunch.kt +++ b/apps/android/app/src/main/java/ai/openclaw/app/AssistantLaunch.kt @@ -34,7 +34,7 @@ fun parseAssistantLaunchIntent(intent: Intent?): AssistantLaunchRequest? { AssistantLaunchRequest( source = "app_action", prompt = prompt, - autoSend = prompt != null, + autoSend = false, ) } diff --git a/apps/android/app/src/test/java/ai/openclaw/app/AssistantLaunchTest.kt b/apps/android/app/src/test/java/ai/openclaw/app/AssistantLaunchTest.kt index 950b695be5b..6a7d566f8b8 100644 --- a/apps/android/app/src/test/java/ai/openclaw/app/AssistantLaunchTest.kt +++ b/apps/android/app/src/test/java/ai/openclaw/app/AssistantLaunchTest.kt @@ -4,7 +4,6 @@ import android.content.Intent import org.junit.Assert.assertEquals import org.junit.Assert.assertFalse import org.junit.Assert.assertNull -import org.junit.Assert.assertTrue import org.junit.Test import org.junit.runner.RunWith import org.robolectric.RobolectricTestRunner @@ -33,7 +32,7 @@ class AssistantLaunchTest { requireNotNull(parsed) assertEquals("app_action", parsed.source) assertEquals("summarize my unread texts", parsed.prompt) - assertTrue(parsed.autoSend) + assertFalse(parsed.autoSend) } @Test