Vincent Koc 33ba3ce951 fix(node-host): harden ambiguous approval operand binding (#44247) ... * fix(node-host): harden approval operand binding * test(node-host): cover approval parser hardening * docs(changelog): note approval hardening GHSA cluster * Update CHANGELOG.md * fix(node-host): remove dead approval parser entries * test(node-host): cover bunx approval wrapper * fix(node-host): unwrap pnpm shim exec forms * test(node-host): cover pnpm shim wrappers		2026-03-12 13:28:35 -04:00
..
config.ts	fix: harden sandbox writes and centralize atomic file writes	2026-03-02 16:45:12 +00:00
exec-policy.test.ts	test: dedupe fixtures and test harness setup	2026-02-23 05:45:54 +00:00
exec-policy.ts	fix(security): block shell-wrapper line-continuation allowlist bypass	2026-02-22 22:36:29 +01:00
invoke-browser.test.ts	refactor: harden browser relay CDP flows	2026-03-08 23:46:10 +00:00
invoke-browser.ts	refactor: harden browser relay CDP flows	2026-03-08 23:46:10 +00:00
invoke-system-run-allowlist.ts	refactor!: remove versioned system-run approval contract	2026-03-02 01:12:53 +00:00
invoke-system-run-plan.test.ts	fix(node-host): harden ambiguous approval operand binding (#44247)	2026-03-12 13:28:35 -04:00
invoke-system-run-plan.ts	fix(node-host): harden ambiguous approval operand binding (#44247)	2026-03-12 13:28:35 -04:00
invoke-system-run.test.ts	fix(node-host): extend script-runner set and add fail-closed guard for mutable-file approval	2026-03-12 01:34:35 +01:00
invoke-system-run.ts	fix(node-host): extend script-runner set and add fail-closed guard for mutable-file approval	2026-03-12 01:34:35 +01:00
invoke-types.ts	refactor(security): simplify system.run approval model	2026-03-11 01:43:06 +00:00
invoke.sanitize-env.test.ts	fix(node-host): decode Windows exec output with active code page (openclaw#30652) thanks @Sid-Qin	2026-03-02 07:50:17 -06:00
invoke.ts	refactor(security): simplify system.run approval model	2026-03-11 01:43:06 +00:00
runner.credentials.test.ts	ui: fix sessions table collapse on narrow widths (#12175)	2026-03-09 23:14:07 -05:00
runner.ts	Node Host: allowlist password precedence labels	2026-03-07 16:43:22 -08:00
with-timeout.ts	fix: add safety timeout to session.compact() to prevent lane deadlock (#16533)	2026-02-14 17:54:12 -05:00