vultr/openclaw
1
0
Fork 0
mirror of https://github.com/openclaw/openclaw.git synced 2026-05-05 19:30:23 +00:00
Code Issues Packages Projects Releases Wiki Activity

fix(security): classify hook sessions case-insensitively

Browse Source
This commit is contained in:
Brian Mendonca
2026-02-24 12:33:35 -07:00
committed by Peter Steinberger
parent 43a3ff3beb
commit 9924f7c84e
2 changed files with 20 additions and 6 deletions
Download Patch File Download Diff File Expand all files Collapse all files

12
src/security/external-content.test.ts
View File

@@ -246,6 +246,12 @@ describe("external-content security", () => {
expect(isExternalHookSession("hook:custom:456")).toBe(true);
});
it("identifies mixed-case hook prefixes", () => {
expect(isExternalHookSession("HOOK:gmail:msg-123")).toBe(true);
expect(isExternalHookSession("Hook:custom:456")).toBe(true);
expect(isExternalHookSession(" HOOK:webhook:123 ")).toBe(true);
});
it("rejects non-hook sessions", () => {
expect(isExternalHookSession("cron:daily-task")).toBe(false);
expect(isExternalHookSession("agent:main")).toBe(false);
@@ -266,6 +272,12 @@ describe("external-content security", () => {
expect(getHookType("hook:custom:456")).toBe("webhook");
});
it("returns hook type for mixed-case hook prefixes", () => {
expect(getHookType("HOOK:gmail:msg-123")).toBe("email");
expect(getHookType(" HOOK:webhook:123 ")).toBe("webhook");
expect(getHookType("Hook:custom:456")).toBe("webhook");
});
it("returns unknown for non-hook sessions", () => {
expect(getHookType("cron:daily")).toBe("unknown");
});