fix(events): sanitize queued system markers (#87094) · openclaw/openclaw@c1151ea
eleqtrizit
·
2026-05-27
·
via Recent Commits to openclaw:main
| Original file line number | Diff line number | Diff line change |
|---|
@@ -9,6 +9,7 @@ Docs: https://docs.openclaw.ai
|
9 | 9 | ### Fixes |
10 | 10 | |
11 | 11 | - Browser/snapshot: validate current tab URLs against the configured SSRF policy before ChromeMCP or direct CDP snapshot reads, closing the local-managed CDP bypass from GHSA-2x93-h3hg-2xfp while preserving existing-session coverage; the PR also rejects existing-session selectors before URL checks, adds focused route coverage, fetches full opengrep CI history, and stabilizes plugin activation normalization tests. Thanks @zsxsoft. |
| 12 | +- System events: sanitize queued system-event text at the queue boundary so untrusted plugin and channel labels cannot spoof nested `System:`, `[System]`, `[Assistant]`, or `[Internal]` prompt markers. (GHSA-j5p4-wxhw-4h4c) Thanks @ttzero25. |
12 | 13 | |
13 | 14 | - Crabbox: bootstrap raw AWS macOS JavaScript commands launched through `/usr/bin/env` so native mac runners without preinstalled Node, Corepack, or pnpm can still run wrapped Node and pnpm proof. |
14 | 15 | - macOS: let app packaging fall back to `corepack pnpm` when a fresh native runner has Node/Corepack but no pnpm shim on `PATH`. |
|
此内容由惯性聚合(RSS阅读器)自动聚合整理，仅供阅读参考。 原文来自 — 版权归原作者所有。
