Agustin Rivera b860a0d4d0 fix: harden qqbot direct media uploads ...

Harden QQBot direct media URL uploads by downloading through the local SSRF guard before QQ upload, disabling redirects, bounding fetch/setup and body reads, and routing downloaded buffers through the existing one-shot/chunked size gate.

Co-authored-by: Agustin Rivera <agustin@rivera-web.com>

2026-05-28 04:21:46 +01:00

..

actions

refactor: centralize inbound supplemental context

2026-05-27 09:26:06 +01:00

codeql

refactor: internalize OpenClaw agent runtime (#85341)

2026-05-27 19:24:04 +01:00

codex/prompts

docs: make changelog release-owned

2026-05-25 19:15:37 +01:00

images/live-media-runner

ci: preinstall ffmpeg for live media checks

2026-04-29 03:48:33 +01:00

instructions

Revert "refactor: move runtime state to SQLite"

2026-05-13 13:33:38 +01:00

ISSUE_TEMPLATE

docs: add beta blocker contributor guidance (#55199)

2026-03-26 09:31:59 -05:00

workflows

fix: harden qqbot direct media uploads

2026-05-28 04:21:46 +01:00

actionlint.yaml

ci: right-size codeql quality runners

2026-04-28 19:26:45 -07:00

CODEOWNERS

fix: cover plugin package locks in dependency review

2026-05-22 12:56:10 +01:00

dependabot.yml

chore: move swabble into apps

2026-05-03 13:10:25 +01:00

labeler.yml

feat: split diffs language pack

2026-05-27 18:08:40 +01:00

package-trusted-sources.json

fix: harden package URL downloads (#85578)

2026-05-23 17:28:29 +01:00

pull_request_template.md

fix: Refine PR template for review state (#86054)

2026-05-24 08:49:02 -05:00

zizmor.yml

chore: reduce root cleanup files

2026-05-03 14:38:13 +01:00