mirror of
https://github.com/openclaw/openclaw.git
synced 2026-05-09 21:20:44 +00:00
a9377fe667
Summary: - The PR exports `ensureAbsoluteDirectory` through the fs-safe/SDK runtime facades and routes browser download ... through safe output directory/file helpers with focused tests, a changelog entry, and SDK API hash updates. - Reproducibility: yes. at source level: current main creates browser download/output roots with raw recursive ... jection coverage for that path. I did not run a live browser runtime reproduction in this read-only review. Automerge notes: - PR branch already contained follow-up commit before automerge: fix(browser): use fs-safe output directory helper - PR branch already contained follow-up commit before automerge: docs(changelog): mention browser fs-safe hardening - PR branch already contained follow-up commit before automerge: fix(browser): harden download output writes Validation: - ClawSweeper review passed for heada9c9570f66. - Required merge gates passed before the squash merge. Prepared head SHA:a9c9570f66Review: https://github.com/openclaw/openclaw/pull/78780#issuecomment-4394146682 Co-authored-by: jesse-merhi <79823012+jesse-merhi@users.noreply.github.com> Co-authored-by: clawsweeper <274271284+clawsweeper[bot]@users.noreply.github.com>
31 lines
853 B
TypeScript
31 lines
853 B
TypeScript
export { createSubsystemLogger } from "openclaw/plugin-sdk/logging-core";
|
|
export {
|
|
ensurePortAvailable,
|
|
extractErrorCode,
|
|
formatErrorMessage,
|
|
ensureAbsoluteDirectory,
|
|
hasProxyEnvConfigured,
|
|
isNotFoundPathError,
|
|
isPathInside,
|
|
isPrivateNetworkAllowedByPolicy,
|
|
matchesHostnameAllowlist,
|
|
normalizeHostname,
|
|
pathScope,
|
|
redactSensitiveText,
|
|
resolveExistingPathsWithinRoot,
|
|
resolvePinnedHostnameWithPolicy,
|
|
resolvePathsWithinRoot,
|
|
resolvePathWithinRoot,
|
|
root,
|
|
safeEqualSecret,
|
|
sanitizeUntrustedFileName,
|
|
resolveStrictExistingPathsWithinRoot,
|
|
resolveWritablePathWithinRoot,
|
|
FsSafeError,
|
|
SsrFBlockedError,
|
|
writeExternalFileWithinRoot,
|
|
writeViaSiblingTempPath,
|
|
wrapExternalContent,
|
|
} from "openclaw/plugin-sdk/security-runtime";
|
|
export type { LookupFn, SsrFPolicy } from "openclaw/plugin-sdk/security-runtime";
|