openclaw

History

Media: reject spoofed input_image MIME payloads (#38289 )

* Media: reject spoofed input image MIME types

* Media: cover spoofed input image MIME regressions

* Changelog: note input image MIME hardening

2026-03-06 14:34:28 -05:00

audio-tags.ts

refactor: unify inline directives and media fetch

2026-01-10 03:01:04 +01:00

audio.test.ts

refactor(media): centralize voice compatibility policy

2026-02-14 03:17:40 +01:00

audio.ts

refactor(media): centralize voice compatibility policy

2026-02-14 03:17:40 +01:00

base64.test.ts

fix(security): harden session export image data-url handling

2026-02-24 02:53:39 +00:00

base64.ts

fix(security): harden session export image data-url handling

2026-02-24 02:53:39 +00:00

constants.ts

fix(media): classify text/* MIME types as documents (openclaw#12341) thanks @arosstale

2026-02-13 18:38:38 -06:00

fetch.test.ts

chore: Fix types in tests 37/N.

2026-02-17 15:50:07 +09:00

fetch.ts

refactor(net): unify proxy env checks and guarded fetch modes

2026-03-02 16:24:26 +00:00

ffmpeg-exec.test.ts

refactor(media): add shared ffmpeg helpers

2026-03-03 01:14:14 +00:00

ffmpeg-exec.ts

refactor(media): add shared ffmpeg helpers

2026-03-03 01:14:14 +00:00

ffmpeg-limits.ts

refactor(media): add shared ffmpeg helpers

2026-03-03 01:14:14 +00:00

host.test.ts

style: align formatting with oxfmt 0.33

2026-02-18 01:34:35 +00:00

host.ts

chore: Enable "experimentalSortImports" in Oxfmt and reformat all imorts.

2026-02-01 10:03:47 +09:00

image-ops.helpers.test.ts

refactor(media): share image resize side grid and quality steps

2026-02-18 18:25:25 +00:00

image-ops.ts

refactor(media): share image resize side grid and quality steps

2026-02-18 18:25:25 +00:00

inbound-path-policy.test.ts

fix: enforce inbound attachment root policy across pipelines

2026-02-19 14:15:51 +01:00

inbound-path-policy.ts

fix: enforce inbound attachment root policy across pipelines

2026-02-19 14:15:51 +01:00

input-files.fetch-guard.test.ts

Media: reject spoofed input_image MIME payloads (#38289 )

2026-03-06 14:34:28 -05:00

input-files.ts

Media: reject spoofed input_image MIME payloads (#38289 )

2026-03-06 14:34:28 -05:00

load-options.test.ts

refactor: split telegram delivery and unify media/frontmatter/i18n pipelines

2026-03-02 04:14:06 +00:00

load-options.ts

refactor: split telegram delivery and unify media/frontmatter/i18n pipelines

2026-03-02 04:14:06 +00:00

local-roots.ts

refactor(tmp): harden temp boundary guardrails

2026-02-24 23:51:10 +00:00

mime.test.ts

test: harden MIME normalization regression coverage (#32280 ) (thanks @Lucenx9)

2026-03-02 23:31:19 +00:00

mime.ts

fix(media): normalize MIME kind detection for audio transcription

2026-03-02 23:31:19 +00:00

outbound-attachment.ts

refactor: split telegram delivery and unify media/frontmatter/i18n pipelines

2026-03-02 04:14:06 +00:00

parse.test.ts

test: optimize gateway infra memory and security coverage

2026-02-21 21:44:50 +00:00

parse.ts

refactor(runtime): harden channel-registry cache invalidation and split outbound delivery flow

2026-03-03 00:05:39 +00:00

pdf-extract.ts

feat: add PDF analysis tool with native provider support (#31319 )

2026-03-01 22:39:12 -08:00

png-encode.ts

refactor: consolidate PNG encoder and safeParseJson utilities (#12457 )

2026-02-09 00:21:54 -08:00

read-response-with-limit.ts

refactor(media): share response size limiter

2026-02-15 05:01:11 +00:00

server.outside-workspace.test.ts

fix: harden sandbox media reads against TOCTOU escapes

2026-03-02 01:04:01 +00:00

server.test.ts

security: add X-Content-Type-Options nosniff header to media route (#30356 )

2026-03-03 13:35:46 -08:00

server.ts

security: add X-Content-Type-Options nosniff header to media route (#30356 )

2026-03-03 13:35:46 -08:00

sniff-mime-from-base64.ts

refactor(media): share base64 mime sniff helper

2026-02-15 04:17:44 +00:00

store.outside-workspace.test.ts

test: add outside-workspace error mapping coverage

2026-02-28 18:08:10 +05:30

store.redirect.test.ts

fix: use 0o644 for inbound media files to allow sandbox read access (#17943 )

2026-03-01 22:14:39 -08:00

store.test.ts

test: share temp home env harness

2026-02-19 15:08:14 +00:00

store.ts

fix: use 0o644 for inbound media files to allow sandbox read access (#17943 )

2026-03-01 22:14:39 -08:00

temp-files.ts

refactor(media): add shared ffmpeg helpers

2026-03-03 01:14:14 +00:00