nyrn
/
openclaw
mirror of https://github.com/openclaw/openclaw.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity
openclaw/extensions
History
pgondhi987 462b4020bc
fix(browser): block SSRF redirect bypass via real-time route interception (#58771) 
Install a Playwright route handler before `page.goto()` so navigations
to private/internal IPs are intercepted and aborted mid-redirect instead
of being checked post-hoc after the request already reached the internal
host. Blocked targets are permanently marked and rejected for subsequent
tool calls.

Thanks @pgondhi987
 		2026-04-02 09:07:57 -07:00
..
acpx build: prepare 2026.4.1-beta.1 release 2026-04-01 15:09:19 +01:00
amazon-bedrock build: prepare 2026.4.1-beta.1 release 2026-04-01 15:09:19 +01:00
anthropic refactor(providers): centralize request capabilities (#59636) 2026-04-02 20:26:22 +09:00
anthropic-vertex fix(providers): centralize Google endpoint classification (#59556) 2026-04-02 19:21:31 +09:00
bluebubbles fix(compare): reuse shared secret comparison helper (#58432) 2026-04-02 13:53:19 +01:00
brave build: prepare 2026.4.1-beta.1 release 2026-04-01 15:09:19 +01:00
browser fix(browser): block SSRF redirect bypass via real-time route interception (#58771) 2026-04-02 09:07:57 -07:00
byteplus build: prepare 2026.4.1-beta.1 release 2026-04-01 15:09:19 +01:00
chutes build: prepare 2026.4.1-beta.1 release 2026-04-01 15:09:19 +01:00
cloudflare-ai-gateway build: prepare 2026.4.1-beta.1 release 2026-04-01 15:09:19 +01:00
copilot-proxy build: prepare 2026.4.1-beta.1 release 2026-04-01 15:09:19 +01:00
deepgram refactor(providers): normalize transport policy wiring (#59682) 2026-04-02 22:54:34 +09:00
deepseek build: prepare 2026.4.1-beta.1 release 2026-04-01 15:09:19 +01:00
device-pair
…
diagnostics-otel build: prepare 2026.4.1-beta.1 release 2026-04-01 15:09:19 +01:00
diffs Diffs: validate viewerBaseUrl in manifest schema 2026-04-02 11:55:05 -04:00
discord chore: refresh deps and backfill changelog 2026-04-02 14:49:47 +01:00
duckduckgo build: prepare 2026.4.1-beta.1 release 2026-04-01 15:09:19 +01:00
elevenlabs build: prepare 2026.4.1-beta.1 release 2026-04-01 15:09:19 +01:00
exa build: prepare 2026.4.1-beta.1 release 2026-04-01 15:09:19 +01:00
fal fix(providers): route image generation through shared transport (#59729) 2026-04-03 00:32:37 +09:00
feishu fix(compare): reuse shared secret comparison helper (#58432) 2026-04-02 13:53:19 +01:00
firecrawl refactor(plugins): tighten web fetch provider boundary (#59646) 2026-04-02 20:53:57 +09:00
github-copilot build: prepare 2026.4.1-beta.1 release 2026-04-01 15:09:19 +01:00
google refactor(providers): normalize transport policy wiring (#59682) 2026-04-02 22:54:34 +09:00
googlechat build: prepare 2026.4.1-beta.1 release 2026-04-01 15:09:19 +01:00
groq build: prepare 2026.4.1-beta.1 release 2026-04-01 15:09:19 +01:00
huggingface build: prepare 2026.4.1-beta.1 release 2026-04-01 15:09:19 +01:00
image-generation-core build: prepare 2026.4.1-beta.1 release 2026-04-01 15:09:19 +01:00
imessage build: prepare 2026.4.1-beta.1 release 2026-04-01 15:09:19 +01:00
irc build: prepare 2026.4.1-beta.1 release 2026-04-01 15:09:19 +01:00
kilocode build: prepare 2026.4.1-beta.1 release 2026-04-01 15:09:19 +01:00
kimi-coding fix: normalize kimi anthropic tool payloads (#59440) 2026-04-02 13:39:51 +05:30
line perf(test): narrow line reply context import 2026-04-02 00:16:03 +09:00
litellm build: prepare 2026.4.1-beta.1 release 2026-04-01 15:09:19 +01:00
llm-task build: prepare 2026.4.1-beta.1 release 2026-04-01 15:09:19 +01:00
lobster !feat(plugins): add web fetch provider boundary (#59465) 2026-04-02 20:25:19 +09:00
matrix Matrix: fix delayed draft block boundaries 2026-04-02 03:47:57 -04:00
mattermost fix(compare): reuse shared secret comparison helper (#58432) 2026-04-02 13:53:19 +01:00
media-understanding-core build: prepare 2026.4.1-beta.1 release 2026-04-01 15:09:19 +01:00
memory-core build: prepare 2026.4.1-beta.1 release 2026-04-01 15:09:19 +01:00
memory-lancedb build: prepare 2026.4.1-beta.1 release 2026-04-01 15:09:19 +01:00
microsoft build: prepare 2026.4.1-beta.1 release 2026-04-01 15:09:19 +01:00
microsoft-foundry build: prepare 2026.4.1-beta.1 release 2026-04-01 15:09:19 +01:00
minimax fix(providers): route image generation through shared transport (#59729) 2026-04-03 00:32:37 +09:00
mistral build: prepare 2026.4.1-beta.1 release 2026-04-01 15:09:19 +01:00
modelstudio refactor(providers): centralize request capabilities (#59636) 2026-04-02 20:26:22 +09:00
moonshot refactor(providers): normalize transport policy wiring (#59682) 2026-04-02 22:54:34 +09:00
msteams fix(msteams): use formatUnknownError instead of String(err) for error logging (#59321) 2026-04-01 21:06:44 -05:00
nextcloud-talk build: prepare 2026.4.1-beta.1 release 2026-04-01 15:09:19 +01:00
nostr docs: fix Nostr inbound signature verification order in docs 2026-04-02 10:11:09 +09:00
nvidia build: prepare 2026.4.1-beta.1 release 2026-04-01 15:09:19 +01:00
ollama build: prepare 2026.4.1-beta.1 release 2026-04-01 15:09:19 +01:00
open-prose build: prepare 2026.4.1-beta.1 release 2026-04-01 15:09:19 +01:00
openai fix(providers): route image generation through shared transport (#59729) 2026-04-03 00:32:37 +09:00
opencode build: prepare 2026.4.1-beta.1 release 2026-04-01 15:09:19 +01:00
opencode-go build: prepare 2026.4.1-beta.1 release 2026-04-01 15:09:19 +01:00
openrouter build: prepare 2026.4.1-beta.1 release 2026-04-01 15:09:19 +01:00
openshell OpenShell: constrain mirror sync roots (#58515) 2026-04-02 06:21:30 -07:00
perplexity build: prepare 2026.4.1-beta.1 release 2026-04-01 15:09:19 +01:00
phone-control
…
qianfan build: prepare 2026.4.1-beta.1 release 2026-04-01 15:09:19 +01:00
qqbot fix(qqbot): restrict structured payload local paths (#58453) 2026-04-02 10:20:52 +01:00
searxng build: prepare 2026.4.1-beta.1 release 2026-04-01 15:09:19 +01:00
sglang build: prepare 2026.4.1-beta.1 release 2026-04-01 15:09:19 +01:00
shared
…
signal build: prepare 2026.4.1-beta.1 release 2026-04-01 15:09:19 +01:00
slack Slack: filter thread context by allowlist (#58380) 2026-04-02 11:01:11 +01:00
speech-core build: prepare 2026.4.1-beta.1 release 2026-04-01 15:09:19 +01:00
synology-chat build: prepare 2026.4.1-beta.1 release 2026-04-01 15:09:19 +01:00
synthetic build: prepare 2026.4.1-beta.1 release 2026-04-01 15:09:19 +01:00
talk-voice style: apply formatter cleanups 2026-03-30 16:20:27 +01:00
tavily build: prepare 2026.4.1-beta.1 release 2026-04-01 15:09:19 +01:00
telegram refactor(telegram): unify callback-data byte limit checks 2026-04-03 00:38:44 +09:00
thread-ownership feat(gateway): make chat history max chars configurable (#58900) 2026-04-01 21:08:37 +11:00
tlon build: prepare 2026.4.1-beta.1 release 2026-04-01 15:09:19 +01:00
together build: prepare 2026.4.1-beta.1 release 2026-04-01 15:09:19 +01:00
twitch build: prepare 2026.4.1-beta.1 release 2026-04-01 15:09:19 +01:00
venice build: prepare 2026.4.1-beta.1 release 2026-04-01 15:09:19 +01:00
vercel-ai-gateway build: prepare 2026.4.1-beta.1 release 2026-04-01 15:09:19 +01:00
vllm build: prepare 2026.4.1-beta.1 release 2026-04-01 15:09:19 +01:00
voice-call fix(compare): reuse shared secret comparison helper (#58432) 2026-04-02 13:53:19 +01:00
volcengine build: prepare 2026.4.1-beta.1 release 2026-04-01 15:09:19 +01:00
whatsapp fix(matrix): restore guided setup flow (#59462) 2026-04-02 02:15:32 -04:00
xai fix(xai): make x_search auth plugin-owned (#59691) 2026-04-02 23:54:07 +09:00
xiaomi build: prepare 2026.4.1-beta.1 release 2026-04-01 15:09:19 +01:00
zai build: prepare 2026.4.1-beta.1 release 2026-04-01 15:09:19 +01:00
zalo fix(zalo): scope webhook replay dedupe (#58444) 2026-04-02 06:07:14 -07:00
zalouser build: prepare 2026.4.1-beta.1 release 2026-04-01 15:09:19 +01:00
.npmignore
…
AGENTS.md
…
CLAUDE.md
…