nyrn
/
openclaw
mirror of https://github.com/openclaw/openclaw.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity
openclaw/extensions
History
w-sss 19a3a30dc0
fix(matrix): correct DM classification without trusting remote user's is_direct flag 
Problem: Matrix DM classification logic had security vulnerabilities:
1. Unreachable code branch when is_direct flag was absent
2. When is_direct: true, skipped 2-member check (shared rooms misclassified as DMs)
3. **CWE-285: Improper Authorization** - trusted remote user's is_direct flag

Security Issues:
- Remote attacker could set is_direct=true on their membership to force DM classification
- Remote attacker could set is_direct=false to bypass DM-only restrictions
- Both could lead to policy bypass (DM allowlist/pairing checks)

Fix:
- hasDirectMatrixMemberFlag() returns boolean | null for local user only
- isStrictDirectMembership() only trusts local user's is_direct (selfUserId)
- Removed directViaSender lookups entirely (do not trust remote-controlled data)
- Falls back to strict 2-member check when is_direct is false/null

Key Insights:
- In Matrix, m.room.member.content.is_direct is set by each member themselves
- Only trust signals the bot controls (local user's membership state)
- 2-member check remains as safe fallback that cannot be manipulated

Closes #56599
 		2026-03-30 18:55:09 -04:00
..
acpx style: apply formatter cleanups 2026-03-30 16:20:27 +01:00
amazon-bedrock chore: bump version to 2026.3.30 2026-03-30 09:28:29 +09:00
anthropic chore: bump version to 2026.3.30 2026-03-30 09:28:29 +09:00
anthropic-vertex chore: bump version to 2026.3.30 2026-03-30 09:28:29 +09:00
bluebubbles BlueBubbles: move status-issue test into plugin 2026-03-30 00:45:22 -04:00
brave chore: bump version to 2026.3.30 2026-03-30 09:28:29 +09:00
browser test: isolate browser navigation tests from host proxy env 2026-03-30 18:10:08 +01:00
byteplus chore: bump version to 2026.3.30 2026-03-30 09:28:29 +09:00
chutes chore: bump version to 2026.3.30 2026-03-30 09:28:29 +09:00
cloudflare-ai-gateway chore: bump version to 2026.3.30 2026-03-30 09:28:29 +09:00
copilot-proxy chore: bump version to 2026.3.30 2026-03-30 09:28:29 +09:00
deepgram chore: bump version to 2026.3.30 2026-03-30 09:28:29 +09:00
deepseek chore: bump version to 2026.3.30 2026-03-30 09:28:29 +09:00
device-pair refactor(channels): route core through registered plugin capabilities 2026-03-30 01:03:42 +01:00
diagnostics-otel chore: bump version to 2026.3.30 2026-03-30 09:28:29 +09:00
diffs Diffs: fall back on invalid language hints (#57902) 2026-03-30 16:30:05 -04:00
discord refactor(exec): unify channel approvals and restore routing/auth (#57838) 2026-03-30 15:49:02 -07:00
duckduckgo chore: bump version to 2026.3.30 2026-03-30 09:28:29 +09:00
elevenlabs chore: bump version to 2026.3.30 2026-03-30 09:28:29 +09:00
exa chore: bump version to 2026.3.30 2026-03-30 09:28:29 +09:00
fal chore: bump version to 2026.3.30 2026-03-30 09:28:29 +09:00
feishu Tests: restore extension plugin test seams 2026-03-29 22:38:44 -04:00
firecrawl chore: bump version to 2026.3.30 2026-03-30 09:28:29 +09:00
github-copilot chore: bump version to 2026.3.30 2026-03-30 09:28:29 +09:00
google chore: bump version to 2026.3.30 2026-03-30 09:28:29 +09:00
googlechat chore: bump version to 2026.3.30 2026-03-30 09:28:29 +09:00
groq chore: bump version to 2026.3.30 2026-03-30 09:28:29 +09:00
huggingface chore: bump version to 2026.3.30 2026-03-30 09:28:29 +09:00
image-generation-core chore: bump version to 2026.3.30 2026-03-30 09:28:29 +09:00
imessage chore: bump version to 2026.3.30 2026-03-30 09:28:29 +09:00
irc chore: bump version to 2026.3.30 2026-03-30 09:28:29 +09:00
kilocode chore: bump version to 2026.3.30 2026-03-30 09:28:29 +09:00
kimi-coding chore: bump version to 2026.3.30 2026-03-30 09:28:29 +09:00
line chore: bump version to 2026.3.30 2026-03-30 09:28:29 +09:00
litellm chore: bump version to 2026.3.30 2026-03-30 09:28:29 +09:00
llm-task chore: bump version to 2026.3.30 2026-03-30 09:28:29 +09:00
lobster chore: bump version to 2026.3.30 2026-03-30 09:28:29 +09:00
matrix fix(matrix): correct DM classification without trusting remote user's is_direct flag 2026-03-30 18:55:09 -04:00
mattermost fix(mattermost): detect stale websocket after bot disable/enable cycle (#53604) 2026-03-30 07:54:59 +05:30
media-understanding-core chore: bump version to 2026.3.30 2026-03-30 09:28:29 +09:00
memory-core fix(memory): stabilize qmd collection scoping 2026-03-30 22:41:21 +03:00
memory-lancedb chore: bump version to 2026.3.30 2026-03-30 09:28:29 +09:00
microsoft chore: bump version to 2026.3.30 2026-03-30 09:28:29 +09:00
microsoft-foundry chore: bump version to 2026.3.30 2026-03-30 09:28:29 +09:00
minimax chore: bump version to 2026.3.30 2026-03-30 09:28:29 +09:00
mistral chore: bump version to 2026.3.30 2026-03-30 09:28:29 +09:00
modelstudio chore: bump version to 2026.3.30 2026-03-30 09:28:29 +09:00
moonshot chore: bump version to 2026.3.30 2026-03-30 09:28:29 +09:00
msteams msteams: filter thread history by sender allowlist (#57723) 2026-03-30 15:38:26 +01:00
nextcloud-talk chore: bump version to 2026.3.30 2026-03-30 09:28:29 +09:00
nostr chore: bump version to 2026.3.30 2026-03-30 09:28:29 +09:00
nvidia chore: bump version to 2026.3.30 2026-03-30 09:28:29 +09:00
ollama Guard marketplace and Ollama network requests (#57850) 2026-03-30 20:08:38 +01:00
open-prose chore: bump version to 2026.3.30 2026-03-30 09:28:29 +09:00
openai OpenAI: preserve oauth exports in index tests 2026-03-29 22:54:48 -04:00
opencode chore: bump version to 2026.3.30 2026-03-30 09:28:29 +09:00
opencode-go chore: bump version to 2026.3.30 2026-03-30 09:28:29 +09:00
openrouter chore: bump version to 2026.3.30 2026-03-30 09:28:29 +09:00
openshell Sandbox: sanitize SSH subprocess env (#57848) 2026-03-30 20:05:57 +01:00
perplexity chore: bump version to 2026.3.30 2026-03-30 09:28:29 +09:00
phone-control tighten phone-control scope helper extraction 2026-03-30 16:17:17 +02:00
qianfan chore: bump version to 2026.3.30 2026-03-30 09:28:29 +09:00
sglang chore: bump version to 2026.3.30 2026-03-30 09:28:29 +09:00
shared refactor: route plugin runtime through bundled seams 2026-03-27 16:40:27 +00:00
signal chore: bump version to 2026.3.30 2026-03-30 09:28:29 +09:00
slack style: apply formatter cleanups 2026-03-30 16:20:27 +01:00
speech-core chore: bump version to 2026.3.30 2026-03-30 09:28:29 +09:00
synology-chat synology-chat: add webhook in-flight guard (#57722) 2026-03-30 15:37:02 +01:00
synthetic chore: bump version to 2026.3.30 2026-03-30 09:28:29 +09:00
talk-voice style: apply formatter cleanups 2026-03-30 16:20:27 +01:00
tavily chore: bump version to 2026.3.30 2026-03-30 09:28:29 +09:00
telegram refactor(exec): unify channel approvals and restore routing/auth (#57838) 2026-03-30 15:49:02 -07:00
thread-ownership fix(extensions): route fetch calls through fetchWithSsrFGuard (#53929) 2026-03-26 02:04:54 -07:00
tlon infra: harden identifier entropy and delay jitter (#57744) 2026-03-30 16:57:30 +01:00
together chore: bump version to 2026.3.30 2026-03-30 09:28:29 +09:00
twitch fix(twitch): align markdown table mode type 2026-03-30 19:32:14 +09:00
venice chore: bump version to 2026.3.30 2026-03-30 09:28:29 +09:00
vercel-ai-gateway chore: bump version to 2026.3.30 2026-03-30 09:28:29 +09:00
vllm chore: bump version to 2026.3.30 2026-03-30 09:28:29 +09:00
voice-call fix(voice-call): canonicalize Telnyx replay request keys (#57829) 2026-03-30 20:01:43 +01:00
volcengine chore: bump version to 2026.3.30 2026-03-30 09:28:29 +09:00
whatsapp WhatsApp: move heartbeat recipient test into plugin 2026-03-30 00:46:50 -04:00
xai chore: bump version to 2026.3.30 2026-03-30 09:28:29 +09:00
xiaomi chore: bump version to 2026.3.30 2026-03-30 09:28:29 +09:00
zai chore: bump version to 2026.3.30 2026-03-30 09:28:29 +09:00
zalo fix(ci): rename extension test support for boundary guards 2026-03-30 09:31:33 +09:00
zalouser chore: bump version to 2026.3.30 2026-03-30 09:28:29 +09:00
.npmignore
…
AGENTS.md Docs: add boundary AGENTS guides (#56647) 2026-03-28 20:22:03 -04:00
CLAUDE.md Docs: add boundary AGENTS guides (#56647) 2026-03-28 20:22:03 -04:00