Vincent Koc 33ba3ce951 fix(node-host): harden ambiguous approval operand binding (#44247) ...

* fix(node-host): harden approval operand binding

* test(node-host): cover approval parser hardening

* docs(changelog): note approval hardening GHSA cluster

* Update CHANGELOG.md

* fix(node-host): remove dead approval parser entries

* test(node-host): cover bunx approval wrapper

* fix(node-host): unwrap pnpm shim exec forms

* test(node-host): cover pnpm shim wrappers

2026-03-12 13:28:35 -04:00

..

config.ts

fix: harden sandbox writes and centralize atomic file writes

2026-03-02 16:45:12 +00:00

exec-policy.test.ts

test: dedupe fixtures and test harness setup

2026-02-23 05:45:54 +00:00

exec-policy.ts

fix(security): block shell-wrapper line-continuation allowlist bypass

2026-02-22 22:36:29 +01:00

invoke-browser.test.ts

refactor: harden browser relay CDP flows

2026-03-08 23:46:10 +00:00

invoke-browser.ts

refactor: harden browser relay CDP flows

2026-03-08 23:46:10 +00:00

invoke-system-run-allowlist.ts

refactor!: remove versioned system-run approval contract

2026-03-02 01:12:53 +00:00

invoke-system-run-plan.test.ts

fix(node-host): harden ambiguous approval operand binding (#44247)

2026-03-12 13:28:35 -04:00

invoke-system-run-plan.ts

fix(node-host): harden ambiguous approval operand binding (#44247)

2026-03-12 13:28:35 -04:00

invoke-system-run.test.ts

fix(node-host): extend script-runner set and add fail-closed guard for mutable-file approval

2026-03-12 01:34:35 +01:00

invoke-system-run.ts

fix(node-host): extend script-runner set and add fail-closed guard for mutable-file approval

2026-03-12 01:34:35 +01:00

invoke-types.ts

refactor(security): simplify system.run approval model

2026-03-11 01:43:06 +00:00

invoke.sanitize-env.test.ts

fix(node-host): decode Windows exec output with active code page (openclaw#30652) thanks @Sid-Qin

2026-03-02 07:50:17 -06:00

invoke.ts

refactor(security): simplify system.run approval model

2026-03-11 01:43:06 +00:00

runner.credentials.test.ts

ui: fix sessions table collapse on narrow widths (#12175)

2026-03-09 23:14:07 -05:00

runner.ts

Node Host: allowlist password precedence labels

2026-03-07 16:43:22 -08:00

with-timeout.ts

fix: add safety timeout to session.compact() to prevent lane deadlock (#16533)

2026-02-14 17:54:12 -05:00