openclaw/src/canvas-host
Abdel Fane 7467fcc529
security: use openFileWithinRoot for A2UI file serving (#10525)
Merged via /review-pr -> /prepare-pr -> /merge-pr.

Prepared head SHA: 64547d6f90
Co-authored-by: abdelsfane <32418586+abdelsfane@users.noreply.github.com>
Co-authored-by: steipete <58493+steipete@users.noreply.github.com>
Reviewed-by: @steipete
2026-02-13 15:37:10 +01:00
..
a2ui refactor: rename to openclaw 2026-01-30 03:16:21 +01:00
a2ui.ts security: use openFileWithinRoot for A2UI file serving (#10525) 2026-02-13 15:37:10 +01:00
server.state-dir.test.ts fix: use STATE_DIR instead of hardcoded ~/.openclaw for identity and canvas (#4824) 2026-02-07 22:16:59 -05:00
server.test.ts security: use openFileWithinRoot for A2UI file serving (#10525) 2026-02-13 15:37:10 +01:00
server.ts fix: use STATE_DIR instead of hardcoded ~/.openclaw for identity and canvas (#4824) 2026-02-07 22:16:59 -05:00