Ayuriel/openclaw
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

harden avatar URL validation to block root-relative paths

Browse Source
This commit is contained in:
Marcus Widing 2026-03-16 22:37:34 +01:00
parent c99ead8a87
commit 7690395efe
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
ui/src/ui/views/agents-utils.ts
View File

@ -194,7 +194,7 @@ export function normalizeAgentLabel(agent: {
return agent.name?.trim() || agent.identity?.name?.trim() || agent.id;
}
const AVATAR_URL_RE = /^(https?:\/\/|data:image\/|\/)/i;
const AVATAR_URL_RE = /^(https?:\/\/|data:image\/|blob:)/i;
export function resolveAgentAvatarUrl(
agent: { identity?: { avatar?: string; avatarUrl?: string } },