openclaw/apps/ios/Sources
Agustin Rivera 49d08382a9
iOS: restrict A2UI action dispatch to trusted canvas URLs (#58471)
* fix(ios): restrict a2ui bridge trust

* test(ios): cover fragment-strip trust and document raw-string equality

* fix(ios): normalize capability URL before trust comparison in canvas commands

* fix(ios): trim canvas.navigate url before trust comparison

* chore: add changelog for iOS A2UI trust boundary

---------

Co-authored-by: Devin Robison <drobison@nvidia.com>
2026-04-02 11:51:09 -06:00
..
Assets.xcassets/AppIcon.appiconset
Calendar
Camera
Capabilities
Chat
Contacts
Device
EventKit
Gateway
LiveActivity
Location
Media
Model iOS: restrict A2UI action dispatch to trusted canvas URLs (#58471) 2026-04-02 11:51:09 -06:00
Motion
Onboarding
Push
Reminders
Screen iOS: restrict A2UI action dispatch to trusted canvas URLs (#58471) 2026-04-02 11:51:09 -06:00
Services
Settings
Status
Voice
HomeToolbar.swift
Info.plist
OpenClaw.entitlements
OpenClawApp.swift
RootCanvas.swift
RootTabs.swift
RootView.swift
SessionKey.swift