mirror of https://github.com/openclaw/openclaw.git
25950bcbb8
Older OpenClaw versions stored absolute sessionFile paths in sessions.json. v2026.2.12 added path traversal security that rejected these absolute paths, breaking all Telegram group handlers with 'Session file path must be within sessions directory' errors. Changes: - resolvePathWithinSessionsDir() now normalizes absolute paths that resolve within the sessions directory, converting them to relative before validation - Added 3 tests for absolute path handling (within dir, with topic, outside dir) Fixes #15283 Closes #15214, #15237, #15216, #15152, #15213 |
||
|---|---|---|
| .. | ||
| group.ts | ||
| main-session.ts | ||
| metadata.test.ts | ||
| metadata.ts | ||
| paths.test.ts | ||
| paths.ts | ||
| reset.test.ts | ||
| reset.ts | ||
| session-key.ts | ||
| store.lock.test.ts | ||
| store.pruning.test.ts | ||
| store.ts | ||
| transcript.test.ts | ||
| transcript.ts | ||
| types.ts | ||