mirror of
https://github.com/openclaw/openclaw.git
synced 2026-05-08 01:18:07 +02:00
Fail closed when Windows ACL checks cannot be verified for file and exec secret providers unless the provider explicitly opts into allowInsecurePath. Strip UTF-8 BOMs from file-backed secrets and document the trusted-path override.\n\nThanks @zhanggpcsu.