Vincent Koc
|
f96ba87f03
|
Zalo: rate limit invalid webhook secret guesses before auth (#44173)
* Zalo: rate limit webhook guesses before auth
* Tests: cover pre-auth Zalo webhook rate limiting
* Changelog: note Zalo pre-auth rate limiting
* Zalo: preserve auth-before-content-type response ordering
* Tests: cover auth-before-content-type webhook ordering
* Zalo: split auth and unauth webhook rate-limit buckets
* Tests: cover auth bucket split for Zalo webhook rate limiting
* Zalo: use trusted proxy client IP for webhook rate limiting
* Tests: cover trusted proxy client IP rate limiting for Zalo
|
2026-03-12 12:30:50 -04:00 |
|
Peter Steinberger
|
addd290f88
|
fix(ci): stabilize tests and detect-secrets after dep updates
|
2026-03-07 11:14:04 +00:00 |
|
Peter Steinberger
|
1aa77e4603
|
refactor(extensions): reuse shared helper primitives
|
2026-03-07 10:41:05 +00:00 |
|
Gustavo Madeira Santana
|
e9c7bb6e15
|
Plugins/zalo: migrate to scoped plugin-sdk imports
|
2026-03-04 02:35:13 -05:00 |
|
Gustavo Madeira Santana
|
dda86af866
|
Extensions: migrate zalo plugin-sdk imports
|
2026-03-04 01:21:30 -05:00 |
|
Peter Steinberger
|
b13d48987c
|
refactor(gateway): unify control-ui and plugin webhook routing
|
2026-03-02 16:18:12 +00:00 |
|
bmendonca3
|
f39882d57e
|
zalo: update pairing-store read assertion to scoped params object
|
2026-03-02 15:38:36 +00:00 |
|
bmendonca3
|
6b7d3fb011
|
security(zalo): scope pairing store by account
|
2026-03-02 15:38:36 +00:00 |
|
Peter Steinberger
|
43cad8268d
|
fix(security): harden webhook memory guards across channels
|
2026-03-02 00:12:05 +00:00 |
|
Peter Steinberger
|
5c7ab8eae3
|
test(zalo): broaden webhook monitor coverage
|
2026-02-22 11:29:31 +00:00 |
|
Peter Steinberger
|
aa267812d3
|
test(security): add webhook hardening regressions
|
2026-02-19 13:31:28 +01:00 |
|
Peter Steinberger
|
b8b43175c5
|
style: align formatting with oxfmt 0.33
|
2026-02-18 01:34:35 +00:00 |
|
Peter Steinberger
|
31f9be126c
|
style: run oxfmt and fix gate failures
|
2026-02-18 01:29:02 +00:00 |
|
cpojer
|
d0cb8c19b2
|
chore: wtf.
|
2026-02-17 13:36:48 +09:00 |
|
Sebastian
|
ed11e93cf2
|
chore(format)
|
2026-02-16 23:20:16 -05:00 |
|
cpojer
|
72f00df95a
|
chore: Fix more extension test type 1/N.
|
2026-02-17 10:14:01 +09:00 |
|
cpojer
|
90ef2d6bdf
|
chore: Update formatting.
|
2026-02-17 09:18:40 +09:00 |
|
Peter Steinberger
|
188c4cd076
|
fix(security): reject ambiguous webhook target matches
|
2026-02-14 17:28:28 +01:00 |
|
cpojer
|
f06dd8df06
|
chore: Enable "experimentalSortImports" in Oxfmt and reformat all imorts.
|
2026-02-01 10:03:47 +09:00 |
|
cpojer
|
230ca789e2
|
chore: Lint extensions folder.
|
2026-01-31 22:42:45 +09:00 |
|
cpojer
|
8cab78abbc
|
chore: Run pnpm format:fix.
|
2026-01-31 21:13:13 +09:00 |
|
Peter Steinberger
|
9a7160786a
|
refactor: rename to openclaw
|
2026-01-30 03:16:21 +01:00 |
|
Peter Steinberger
|
6d16a658e5
|
refactor: rename clawdbot to moltbot with legacy compat
|
2026-01-27 12:21:02 +00:00 |
|
Peter Steinberger
|
b6d470a679
|
feat: migrate zalo plugin to sdk
|
2026-01-18 03:37:26 +00:00 |
|
Peter Steinberger
|
1656f491fd
|
fix: normalize pairing aliases and webhook guard (#991) (thanks @longmaba)
|
2026-01-16 04:55:16 +00:00 |
|