Files
openclaw/src/plugin-sdk/browser-security-runtime.ts
Agustin Rivera 121c452d66 fix(browser): tighten strict browser hostname navigation (#64367)
* fix(browser): tighten strict browser hostname navigation

* fix(browser): address review follow-ups

* chore(changelog): add strict browser hostname navigation entry

* fix(browser): remove stale state prop from SelectionDeps call site

The PR's SelectionDeps uses getSsrFPolicy instead of the full state
object; the state property was leftover from an earlier iteration.

---------

Co-authored-by: Devin Robison <drobison@nvidia.com>
2026-04-10 13:18:53 -06:00

27 lines
1.1 KiB
TypeScript

export { hasConfiguredSecretInput } from "../config/types.secrets.js";
export { extractErrorCode, formatErrorMessage } from "../infra/errors.js";
export {
SafeOpenError,
openFileWithinRoot,
writeFileFromPathWithinRoot,
} from "../infra/fs-safe.js";
export { hasProxyEnvConfigured } from "../infra/net/proxy-env.js";
export {
SsrFBlockedError,
isBlockedHostnameOrIp,
matchesHostnameAllowlist,
isPrivateNetworkAllowedByPolicy,
resolvePinnedHostnameWithPolicy,
type LookupFn,
type SsrFPolicy,
} from "../infra/net/ssrf.js";
export { normalizeHostname } from "../infra/net/hostname.js";
export { isNotFoundPathError, isPathInside } from "../infra/path-guards.js";
export { ensurePortAvailable } from "../infra/ports.js";
export { generateSecureToken } from "../infra/secure-random.js";
export { resolvePreferredOpenClawTmpDir } from "../infra/tmp-openclaw-dir.js";
export { createSubsystemLogger } from "../logging/subsystem.js";
export { redactSensitiveText } from "../logging/redact.js";
export { wrapExternalContent } from "../security/external-content.js";
export { safeEqualSecret } from "../security/secret-equal.js";