romtuck/openclaw
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
fc379a1332
openclaw/extensions
History
Diogo Ortega fc379a1332 security: WhatsApp incident remediation fixes 
FIX-1.1: Enforce outbound allowlist for explicit WhatsApp sends
- Added allowlist validation in explicit mode in resolveTarget
- Added --allow-unlisted CLI flag for emergency overrides
- Groups always allowed (no allowlist check needed)

FIX-1.4: Heartbeat delivery hard-gating
- Added requireExplicitTarget config option for heartbeat
- When enabled, heartbeat delivery requires explicit to parameter
- Returns channel: 'none' with reason: 'require-explicit' otherwise

FIX-3.2: Delivery context trust boundary
- Added isSenderTrustedForDeliveryContext() helper
- Only update delivery context from allowlisted senders
- Prevents untrusted inbound from setting routing targets

Tests: All new tests passing (targets: 25/25, delivery-context: 10/10)
2026-01-27 12:23:31 +00:00
..
bluebubbles refactor: rename clawdbot to moltbot with legacy compat 2026-01-27 12:21:02 +00:00
copilot-proxy refactor: rename clawdbot to moltbot with legacy compat 2026-01-27 12:21:02 +00:00
diagnostics-otel refactor: rename clawdbot to moltbot with legacy compat 2026-01-27 12:21:02 +00:00
discord refactor: rename clawdbot to moltbot with legacy compat 2026-01-27 12:21:02 +00:00
google-antigravity-auth refactor: rename clawdbot to moltbot with legacy compat 2026-01-27 12:21:02 +00:00
google-gemini-cli-auth refactor: rename clawdbot to moltbot with legacy compat 2026-01-27 12:21:02 +00:00
googlechat refactor: rename clawdbot to moltbot with legacy compat 2026-01-27 12:21:02 +00:00
imessage refactor: rename clawdbot to moltbot with legacy compat 2026-01-27 12:21:02 +00:00
line refactor: rename clawdbot to moltbot with legacy compat 2026-01-27 12:21:02 +00:00
llm-task refactor: rename clawdbot to moltbot with legacy compat 2026-01-27 12:21:02 +00:00
lobster refactor: rename clawdbot to moltbot with legacy compat 2026-01-27 12:21:02 +00:00
matrix refactor: rename clawdbot to moltbot with legacy compat 2026-01-27 12:21:02 +00:00
mattermost refactor: rename clawdbot to moltbot with legacy compat 2026-01-27 12:21:02 +00:00
memory-core refactor: rename clawdbot to moltbot with legacy compat 2026-01-27 12:21:02 +00:00
memory-lancedb refactor: rename clawdbot to moltbot with legacy compat 2026-01-27 12:21:02 +00:00
msteams refactor: rename clawdbot to moltbot with legacy compat 2026-01-27 12:21:02 +00:00
nextcloud-talk refactor: rename clawdbot to moltbot with legacy compat 2026-01-27 12:21:02 +00:00
nostr refactor: rename clawdbot to moltbot with legacy compat 2026-01-27 12:21:02 +00:00
open-prose refactor: rename clawdbot to moltbot with legacy compat 2026-01-27 12:21:02 +00:00
qwen-portal-auth fix: enforce plugin config schemas (#1272) (thanks @thewilloftheshadow) 2026-01-20 11:03:17 +00:00
signal refactor: rename clawdbot to moltbot with legacy compat 2026-01-27 12:21:02 +00:00
slack refactor: rename clawdbot to moltbot with legacy compat 2026-01-27 12:21:02 +00:00
telegram refactor: rename clawdbot to moltbot with legacy compat 2026-01-27 12:21:02 +00:00
tlon refactor: rename clawdbot to moltbot with legacy compat 2026-01-27 12:21:02 +00:00
twitch refactor: rename clawdbot to moltbot with legacy compat 2026-01-27 12:21:02 +00:00
voice-call refactor: rename clawdbot to moltbot with legacy compat 2026-01-27 12:21:02 +00:00
whatsapp security: WhatsApp incident remediation fixes 2026-01-27 12:23:31 +00:00
zalo refactor: rename clawdbot to moltbot with legacy compat 2026-01-27 12:21:02 +00:00
zalouser refactor: rename clawdbot to moltbot with legacy compat 2026-01-27 12:21:02 +00:00