openclaw/src/security
边黎安 a4c373935f
fix(agents): fall back to agents.defaults.model when agent has no model config (#24210)
Merged via /review-pr -> /prepare-pr -> /merge-pr.

Prepared head SHA: 0f272b1027
Co-authored-by: bianbiandashen <16240681+bianbiandashen@users.noreply.github.com>
Co-authored-by: gumadeiras <5599352+gumadeiras@users.noreply.github.com>
Reviewed-by: @gumadeiras
2026-02-23 03:18:55 -05:00
..
audit-channel.ts fix(security): warn on Discord name-based allowlists in audit 2026-02-21 19:45:17 +01:00
audit-extra.async.ts fix(sandbox): use one-time noVNC observer tokens 2026-02-21 13:56:58 +01:00
audit-extra.sync.test.ts perf(test): fold secret equality assertions into audit extra suite 2026-02-16 00:18:27 +00:00
audit-extra.sync.ts fix(agents): fall back to agents.defaults.model when agent has no model config (#24210) 2026-02-23 03:18:55 -05:00
audit-extra.ts fix(security): harden gateway command/audit guardrails 2026-02-22 08:45:48 +01:00
audit-fs.ts Doctor/Security: fix telegram numeric ID + symlink config permission warnings (#19844) 2026-02-18 00:09:51 -08:00
audit-tool-policy.ts refactor(core): dedupe tool policy and IPv4 matcher logic 2026-02-16 16:14:54 +00:00
audit.test.ts test(security): consolidate runtime guardrail scans 2026-02-22 22:06:01 +00:00
audit.ts refactor(exec): centralize safe-bin policy checks 2026-02-22 13:18:25 +01:00
channel-metadata.ts fix(security): separate untrusted channel metadata from system prompt (thanks @KonstantinMirin) 2026-02-03 23:02:45 -08:00
dangerous-config-flags.ts feat(security): warn on dangerous config flags at startup 2026-02-22 10:11:46 +01:00
dangerous-tools.ts refactor(security): centralize dangerous tool lists 2026-02-14 13:27:05 +01:00
dm-policy-shared.test.ts fix: enforce strict allowlist across pairing stores (#23017) 2026-02-22 00:00:23 +01:00
dm-policy-shared.ts fix: enforce strict allowlist across pairing stores (#23017) 2026-02-22 00:00:23 +01:00
external-content.test.ts test(security): dedupe external marker sanitization assertions 2026-02-22 07:44:57 +00:00
external-content.ts Fix formatting (#22474) 2026-02-21 01:37:02 -05:00
fix.test.ts refactor(core): dedupe shared config and runtime helpers 2026-02-16 14:59:30 +00:00
fix.ts style: align formatting with oxfmt 0.33 2026-02-18 01:34:35 +00:00
scan-paths.ts fix(security): enforce plugin and hook path containment 2026-02-19 15:37:29 +01:00
secret-equal.ts fix(security): SHA-256 hash before timingSafeEqual to prevent length leak (#20856) 2026-02-19 03:16:35 -08:00
skill-scanner.test.ts security: add skill/plugin code safety scanner (#9806) 2026-02-05 16:06:11 -08:00
skill-scanner.ts refactor(security): reuse shared scan path containment helper 2026-02-19 00:20:15 +00:00
temp-path-guard.test.ts test(security): consolidate runtime guardrail scans 2026-02-22 22:06:01 +00:00
windows-acl.test.ts refactor: simplify windows ACL parsing and expand coverage 2026-02-22 10:43:03 +01:00
windows-acl.ts refactor: simplify windows ACL parsing and expand coverage 2026-02-22 10:43:03 +01:00