openclaw

mirror of https://github.com/openclaw/openclaw.git synced 2026-05-15 13:19:24 +02:00

Files

tmimmanuel 29919bb6e4 fix: land node-host approval binding for native binaries (#66731 ) (thanks @tmimmanuel)

* fix(node-host): allow absolute-path native binaries through approval binder

* test(node-host): cover binary binder edge cases

* test(node-host): use stable native binary fixture

* fix(ci): restore fail-closed race handling

* refactor(node-host): distill approval binding regressions

* fix(node-host): fail closed on unknown shell payload headers

* fix: land node-host approval binding for native binaries (#66731) (thanks @tmimmanuel)

* fix: keep relative shell binary payloads fail-closed (#66731) (thanks @tmimmanuel)

* fix: keep shell binary bypass on stable paths only (#66731) (thanks @tmimmanuel)

* fix: fail closed on symlinked shell binary targets (#66731) (thanks @tmimmanuel)

---------

Co-authored-by: Ayaan Zaidi <hi@obviy.us>

2026-04-16 20:30:09 +05:30

config.ts

refactor: remove confirmed dead helpers

2026-04-06 16:13:26 +01:00

exec-policy.test.ts

fix(security): broaden shell-wrapper detection and block env-argv assignment injection [AI-assisted] (#65717 )

2026-04-13 11:48:42 +05:30

exec-policy.ts

fix(exec): align node shell allowlist wrappers (#62401 )

2026-04-07 13:05:57 +03:00

invoke-system-run-allowlist.ts

fix(exec): resolve remote approval regressions (#58792 )