Ayuriel/openclaw
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

docs(feishu): clarify localRoots configuration for media uploads with security considerations

Browse Source
This commit is contained in:
saurav470 2026-03-08 13:45:27 +05:30
parent f89c2982f0
commit e70af87a1c
1 changed files with 7 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

8
extensions/feishu/src/config-schema.ts
View File

@ -165,7 +165,13 @@ const FeishuSharedConfigShape = {
chunkMode: z.enum(["length", "newline"]).optional(),
blockStreamingCoalesce: BlockStreamingCoalesceSchema,
mediaMaxMb: z.number().positive().optional(),
/** Allowed roots for local media paths, or "any" to allow any path. Used by sendMedia/local file uploads. */
/**
* Allowed roots for local media paths (sendMedia / local file uploads). Array of absolute
* directory paths, or "any" to allow any local path.
* Security: "any" bypasses path-containment checks and grants unrestricted filesystem read
* access to the process. Prefer explicit path arrays in production; use "any" only in
* trusted environments (e.g. dev or locked-down hosts).
*/
localRoots: z.union([z.literal("any"), z.array(z.string())]).optional(),
httpTimeoutMs: z.number().int().positive().max(300_000).optional(),
heartbeat: ChannelHeartbeatVisibilitySchema,