romtuck/openclaw
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
16a7964493
openclaw/src/web
History
Robby (AI-assisted) 16a7964493 security(web): sanitize WhatsApp accountId to prevent path traversal 
Add normalizeAccountId() to sanitize account IDs before use in path.join(),
preventing potential path traversal attacks via malicious config values.

This follows the same pattern already used in src/telegram/update-offset-store.ts
for Telegram account ID sanitization.

Fixes #2692
2026-01-27 09:24:24 +00:00
..
auto-reply fix: newline chunking across channels 2026-01-25 04:11:36 +00:00
inbound refactor(logging): split config + subsystem imports 2026-01-19 00:15:44 +00:00
accounts.ts security(web): sanitize WhatsApp accountId to prevent path traversal 2026-01-27 09:24:24 +00:00
accounts.whatsapp-auth.test.ts refactor: centralize whatsapp auth detection 2026-01-15 04:01:06 +00:00
active-listener.ts refactor: normalize cli command hints 2026-01-20 07:43:00 +00:00
auth-store.ts refactor: normalize cli command hints 2026-01-20 07:43:00 +00:00
auto-reply.broadcast-groups.broadcasts-sequentially-configured-order.test.ts chore: format + regenerate protocol 2026-01-17 03:40:49 +00:00
auto-reply.broadcast-groups.skips-unknown-broadcast-agent-ids-agents-list.test.ts chore: migrate to oxlint and oxfmt 2026-01-14 15:02:19 +00:00
auto-reply.impl.ts chore: migrate to oxlint and oxfmt 2026-01-14 15:02:19 +00:00
auto-reply.partial-reply-gating.test.ts chore: migrate to oxlint and oxfmt 2026-01-14 15:02:19 +00:00
auto-reply.ts refactor(src): split oversized modules 2026-01-14 01:17:56 +00:00
auto-reply.typing-controller-idle.test.ts chore: migrate to oxlint and oxfmt 2026-01-14 15:02:19 +00:00
auto-reply.web-auto-reply.compresses-common-formats-jpeg-cap.test.ts fix: wire previous session entry and stabilize jpeg test 2026-01-17 01:55:35 +00:00
auto-reply.web-auto-reply.falls-back-text-media-send-fails.test.ts chore: migrate to oxlint and oxfmt 2026-01-14 15:02:19 +00:00
auto-reply.web-auto-reply.prefixes-body-same-phone-marker-from.test.ts fix: scope whatsapp self-chat response prefix 2026-01-16 10:54:11 +00:00
auto-reply.web-auto-reply.reconnects-after-connection-close.test.ts Merge remote-tracking branch 'origin/main' into feature/agent-avatar-support 2026-01-22 06:27:45 +00:00
auto-reply.web-auto-reply.requires-mention-group-chats-injects-history-replying.test.ts refactor: centralize group sender identity 2026-01-17 03:32:48 +00:00
auto-reply.web-auto-reply.sends-tool-summaries-immediately-responseprefix.test.ts fix: stop sending tool summaries to channels 2026-01-25 11:54:29 +00:00
auto-reply.web-auto-reply.supports-always-group-activation-silent-token-preserves.test.ts refactor: normalize inbound context 2026-01-17 04:05:33 +00:00
auto-reply.web-auto-reply.uses-per-agent-mention-patterns-group-gating.test.ts chore: migrate to oxlint and oxfmt 2026-01-14 15:02:19 +00:00
inbound.media.test.ts TTS: gate auto audio on inbound voice notes (#1667) 2026-01-25 04:35:20 +00:00
inbound.test.ts chore: migrate to oxlint and oxfmt 2026-01-14 15:02:19 +00:00
inbound.ts chore: migrate to oxlint and oxfmt 2026-01-14 15:02:19 +00:00
login-qr.test.ts chore: migrate to oxlint and oxfmt 2026-01-14 15:02:19 +00:00
login-qr.ts chore: migrate to oxlint and oxfmt 2026-01-14 15:02:19 +00:00
login.coverage.test.ts test: stabilize slow and flaky tests 2026-01-16 06:24:58 +00:00
login.test.ts chore: migrate to oxlint and oxfmt 2026-01-14 15:02:19 +00:00
login.ts refactor: normalize cli command hints 2026-01-20 07:43:00 +00:00
logout.test.ts fix: stabilize tests and logging 2026-01-18 18:43:31 +00:00
media.test.ts fix: improve web image optimization 2026-01-24 01:18:58 +00:00
media.ts fix: improve web image optimization 2026-01-24 01:18:58 +00:00
monitor-inbox.allows-messages-from-senders-allowfrom-list.test.ts chore: format web monitor inbox tests 2026-01-16 09:26:18 +00:00
monitor-inbox.blocks-messages-from-unauthorized-senders-not-allowfrom.test.ts chore: format web monitor inbox tests 2026-01-16 09:26:18 +00:00
monitor-inbox.captures-media-path-image-messages.test.ts chore: migrate to oxlint and oxfmt 2026-01-14 15:02:19 +00:00
monitor-inbox.streams-inbound-messages.test.ts chore: migrate to oxlint and oxfmt 2026-01-14 15:02:19 +00:00
outbound.test.ts chore: migrate to oxlint and oxfmt 2026-01-14 15:02:19 +00:00
outbound.ts fix: add per-channel markdown table conversion (#1495) (thanks @odysseus0) 2026-01-23 18:39:25 +00:00
qr-image.test.ts chore: migrate to oxlint and oxfmt 2026-01-14 15:02:19 +00:00
qr-image.ts chore: migrate to oxlint and oxfmt 2026-01-14 15:02:19 +00:00
reconnect.test.ts chore: rename project to clawdbot 2026-01-04 14:38:51 +00:00
reconnect.ts chore: migrate to oxlint and oxfmt 2026-01-14 15:02:19 +00:00
session.test.ts chore: migrate to oxlint and oxfmt 2026-01-14 15:02:19 +00:00
session.ts refactor: normalize cli command hints 2026-01-20 07:43:00 +00:00
test-helpers.ts chore: migrate to oxlint and oxfmt 2026-01-14 15:02:19 +00:00
vcard.ts chore: migrate to oxlint and oxfmt 2026-01-14 15:02:19 +00:00