13otKmdr a8dd9ffea1 security: add X-Content-Type-Options nosniff header to media route (#30356) ...

Merged via squash.

Prepared head SHA: b14f9ad7ca
Co-authored-by: 13otKmdr <154699144+13otKmdr@users.noreply.github.com>
Co-authored-by: grp06 <1573959+grp06@users.noreply.github.com>
Reviewed-by: @grp06

2026-03-03 13:35:46 -08:00

..

audio-tags.ts

refactor: unify inline directives and media fetch

2026-01-10 03:01:04 +01:00

audio.test.ts

refactor(media): centralize voice compatibility policy

2026-02-14 03:17:40 +01:00

audio.ts

refactor(media): centralize voice compatibility policy

2026-02-14 03:17:40 +01:00

base64.test.ts

fix(security): harden session export image data-url handling

2026-02-24 02:53:39 +00:00

base64.ts

fix(security): harden session export image data-url handling

2026-02-24 02:53:39 +00:00

constants.ts

fix(media): classify text/* MIME types as documents (openclaw#12341) thanks @arosstale

2026-02-13 18:38:38 -06:00

fetch.test.ts

chore: Fix types in tests 37/N.

2026-02-17 15:50:07 +09:00

fetch.ts

refactor(net): unify proxy env checks and guarded fetch modes

2026-03-02 16:24:26 +00:00

ffmpeg-exec.test.ts

refactor(media): add shared ffmpeg helpers

2026-03-03 01:14:14 +00:00

ffmpeg-exec.ts

refactor(media): add shared ffmpeg helpers

2026-03-03 01:14:14 +00:00

ffmpeg-limits.ts

refactor(media): add shared ffmpeg helpers

2026-03-03 01:14:14 +00:00

host.test.ts

style: align formatting with oxfmt 0.33

2026-02-18 01:34:35 +00:00

host.ts

chore: Enable "experimentalSortImports" in Oxfmt and reformat all imorts.

2026-02-01 10:03:47 +09:00

image-ops.helpers.test.ts

refactor(media): share image resize side grid and quality steps

2026-02-18 18:25:25 +00:00

image-ops.ts

refactor(media): share image resize side grid and quality steps

2026-02-18 18:25:25 +00:00

inbound-path-policy.test.ts

fix: enforce inbound attachment root policy across pipelines

2026-02-19 14:15:51 +01:00

inbound-path-policy.ts

fix: enforce inbound attachment root policy across pipelines

2026-02-19 14:15:51 +01:00

input-files.fetch-guard.test.ts

fix(security): harden session export image data-url handling

2026-02-24 02:53:39 +00:00

input-files.ts

feat: add PDF analysis tool with native provider support (#31319)

2026-03-01 22:39:12 -08:00

load-options.test.ts

refactor: split telegram delivery and unify media/frontmatter/i18n pipelines

2026-03-02 04:14:06 +00:00

load-options.ts

refactor: split telegram delivery and unify media/frontmatter/i18n pipelines

2026-03-02 04:14:06 +00:00

local-roots.ts

refactor(tmp): harden temp boundary guardrails

2026-02-24 23:51:10 +00:00

mime.test.ts

test: harden MIME normalization regression coverage (#32280) (thanks @Lucenx9)

2026-03-02 23:31:19 +00:00

mime.ts

fix(media): normalize MIME kind detection for audio transcription

2026-03-02 23:31:19 +00:00

outbound-attachment.ts

refactor: split telegram delivery and unify media/frontmatter/i18n pipelines

2026-03-02 04:14:06 +00:00

parse.test.ts

test: optimize gateway infra memory and security coverage

2026-02-21 21:44:50 +00:00

parse.ts

refactor(runtime): harden channel-registry cache invalidation and split outbound delivery flow

2026-03-03 00:05:39 +00:00

pdf-extract.ts

feat: add PDF analysis tool with native provider support (#31319)

2026-03-01 22:39:12 -08:00

png-encode.ts

refactor: consolidate PNG encoder and safeParseJson utilities (#12457)

2026-02-09 00:21:54 -08:00

read-response-with-limit.ts

refactor(media): share response size limiter

2026-02-15 05:01:11 +00:00

server.outside-workspace.test.ts

fix: harden sandbox media reads against TOCTOU escapes

2026-03-02 01:04:01 +00:00

server.test.ts

security: add X-Content-Type-Options nosniff header to media route (#30356)

2026-03-03 13:35:46 -08:00

server.ts

security: add X-Content-Type-Options nosniff header to media route (#30356)

2026-03-03 13:35:46 -08:00

sniff-mime-from-base64.ts

refactor(media): share base64 mime sniff helper

2026-02-15 04:17:44 +00:00

store.outside-workspace.test.ts

test: add outside-workspace error mapping coverage

2026-02-28 18:08:10 +05:30

store.redirect.test.ts

fix: use 0o644 for inbound media files to allow sandbox read access (#17943)

2026-03-01 22:14:39 -08:00

store.test.ts

test: share temp home env harness

2026-02-19 15:08:14 +00:00

store.ts

fix: use 0o644 for inbound media files to allow sandbox read access (#17943)

2026-03-01 22:14:39 -08:00

temp-files.ts

refactor(media): add shared ffmpeg helpers

2026-03-03 01:14:14 +00:00