openclaw/docs/start
Glucksberg 34e2425b4d
fix(security): restrict MEDIA path extraction to prevent LFI (#4930)
* fix(security): restrict inbound media staging to media directory

* docs: update MEDIA path guidance for security restrictions

- Update agent hint to warn against absolute/~ paths
- Update docs example to use https:// instead of /tmp/

---------

Co-authored-by: Evan Otero <evanotero@google.com>
2026-01-31 10:55:37 -08:00
..
getting-started.md chore: Run `pnpm format:fix`. 2026-01-31 21:13:13 +09:00
hubs.md chore: Run `pnpm format:fix`. 2026-01-31 21:13:13 +09:00
lore.md chore: Run `pnpm format:fix`. 2026-01-31 21:13:13 +09:00
onboarding.md chore: Run `pnpm format:fix`. 2026-01-31 21:13:13 +09:00
openclaw.md fix(security): restrict MEDIA path extraction to prevent LFI (#4930) 2026-01-31 10:55:37 -08:00
pairing.md chore: Run `pnpm format:fix`. 2026-01-31 21:13:13 +09:00
setup.md chore: Run `pnpm format:fix`. 2026-01-31 21:13:13 +09:00
showcase.md chore: Run `pnpm format:fix`. 2026-01-31 21:13:13 +09:00
wizard.md chore: Run `pnpm format:fix`. 2026-01-31 21:13:13 +09:00