Peter Steinberger
|
b1bbf3fff1
|
fix: harden temp dir perms for umask 0002 (landed from #27860 by @stakeswky)
Co-authored-by: 不做了睡大觉 <stakeswky@gmail.com>
|
2026-02-26 21:59:55 +00:00 |
|
Peter Steinberger
|
1f004e6640
|
refactor(tmp): simplify trusted tmp dir state checks
|
2026-02-26 02:46:53 +01:00 |
|
Peter Steinberger
|
f41715a18f
|
refactor(browser): split act route modules and dedupe path guards
|
2026-02-26 01:21:34 +01:00 |
|
Peter Steinberger
|
496a76c03b
|
fix(security): harden browser trace/download temp path handling
|
2026-02-26 01:04:05 +01:00 |
|
Peter Steinberger
|
def993dbd8
|
refactor(tmp): harden temp boundary guardrails
|
2026-02-24 23:51:10 +00:00 |
|
Peter Steinberger
|
3aa94afcfd
|
fix(security): harden archive extraction (#16203)
* fix(browser): confine upload paths for file chooser
* fix(browser): sanitize suggested download filenames
* chore(lint): avoid control regex in download sanitizer
* test(browser): cover absolute escape paths
* docs(browser): update upload example path
* refactor(browser): centralize upload path confinement
* fix(infra): harden tmp dir selection
* fix(security): harden archive extraction
* fix(infra): harden tar extraction filter
|
2026-02-14 14:42:08 +01:00 |
|
Gustavo Madeira Santana
|
b02c88d3e7
|
Browser/Logging: share default openclaw tmp dir resolver
|
2026-02-12 16:44:04 -05:00 |
|