Peter Steinberger 3aa94afcfd fix(security): harden archive extraction (#16203) ...

* fix(browser): confine upload paths for file chooser

* fix(browser): sanitize suggested download filenames

* chore(lint): avoid control regex in download sanitizer

* test(browser): cover absolute escape paths

* docs(browser): update upload example path

* refactor(browser): centralize upload path confinement

* fix(infra): harden tmp dir selection

* fix(security): harden archive extraction

* fix(infra): harden tar extraction filter

2026-02-14 14:42:08 +01:00

..

.i18n

Docs: seed ja-JP translations

2026-02-08 10:18:04 -08:00

assets

docs: modernize gateway configuration page (Phase 1) (#14111)

2026-02-11 10:44:34 -05:00

automation

fix(security): harden plugin/hook npm installs

2026-02-14 14:07:14 +01:00

channels

fix(reply): honour explicit [[reply_to_*]] tags when replyToMode is off (#16174)

2026-02-14 13:29:42 +01:00

cli

fix(security): harden plugin/hook npm installs

2026-02-14 14:07:14 +01:00

concepts

chore!: remove moltbot legacy state/config support

2026-02-14 12:40:47 +01:00

debug

Docs: enable markdownlint autofixables except list numbering (#10476)

2026-02-06 10:08:59 -05:00

diagnostics

Docs: add nav titles across docs (#5689)

2026-01-31 15:04:03 -06:00

experiments

fix: prevent act:evaluate hangs from getting browser tool stuck/killed (#13498)

2026-02-11 07:54:48 +08:00

gateway

fix(security): restrict hook transform module loading

2026-02-14 13:46:09 +01:00

help

test: speed up e2e vitest runtime

2026-02-13 14:57:12 +00:00

images

Channels: finish Feishu/Lark integration

2026-02-03 14:27:39 -08:00

install

docs: add Windows installer debug equivalents

2026-02-13 02:07:03 +01:00

ja-JP

docs: fix ja-JP dashboard URL link

2026-02-09 11:26:27 -06:00

nodes

fix: fix: transcribe audio before mention check in groups with requireMention (openclaw#9973) thanks @mcinteerj

2026-02-12 09:58:01 -06:00

platforms

chore(release): bump version to 2026.2.13

2026-02-13 04:13:07 +01:00

plugins

docs: canonicalize docs paths and align zh navigation (#11428)

2026-02-07 15:40:35 -05:00

providers

fix: align NVIDIA provider docs and model ids (#11606)

2026-02-14 05:48:40 +01:00

refactor

fix(config): accept $schema key in root config (#15280)

2026-02-14 03:07:12 +01:00

reference

test: speed up e2e vitest runtime

2026-02-13 14:57:12 +00:00

security

Centralize date/time formatting utilities (#11831)

2026-02-08 04:53:31 -08:00

start

fix(docs): remove hardcoded Mermaid init blocks that break dark mode (#15157)

2026-02-12 22:48:26 -05:00

tools

fix(security): harden archive extraction (#16203)

2026-02-14 14:42:08 +01:00

web

docs: link trusted-proxy auth from gateway docs (#16172)

2026-02-14 12:44:25 +01:00

zh-CN

fix(docs): update outdated hooks documentation URLs (#16165)

2026-02-14 13:05:37 +01:00

brave-search.md

Docs: enable markdownlint autofixables except list numbering (#10476)

2026-02-06 10:08:59 -05:00

ci.md

chore: Cleanup useless CI job.

2026-02-12 09:37:45 +09:00

CNAME

refactor: rename to openclaw

2026-01-30 03:16:21 +01:00

date-time.md

Docs: add nav titles across docs (#5689)

2026-01-31 15:04:03 -06:00

docs.json

docs: link trusted-proxy auth from gateway docs (#16172)

2026-02-14 12:44:25 +01:00

index.md

Docs: enable markdownlint autofixables except list numbering (#10476)

2026-02-06 10:08:59 -05:00

logging.md

Docs: add nav titles across docs (#5689)

2026-01-31 15:04:03 -06:00

network.md

docs: canonicalize docs paths and align zh navigation (#11428)

2026-02-07 15:40:35 -05:00

perplexity.md

Docs: enable markdownlint autofixables except list numbering (#10476)

2026-02-06 10:08:59 -05:00

pi-dev.md

Docs: enable markdownlint autofixables except list numbering (#10476)

2026-02-06 10:08:59 -05:00

pi.md

fix: align pi-coding-agent typings and docs

2026-02-01 16:08:01 -08:00

prose.md

docs: canonicalize docs paths and align zh navigation (#11428)

2026-02-07 15:40:35 -05:00

style.css

Docs: streamline start and install docs (#9648)

2026-02-05 10:09:45 -05:00

tts.md

Docs: add nav titles across docs (#5689)

2026-01-31 15:04:03 -06:00

vps.md

Docs: enable markdownlint autofixables except list numbering (#10476)

2026-02-06 10:08:59 -05:00

whatsapp-openclaw-ai-zh.jpg

Docs: add zh-CN landing notice + AI image

2026-02-02 18:35:01 +01:00

whatsapp-openclaw.jpg

refactor: rename to openclaw

2026-01-30 03:16:21 +01:00