Peter Steinberger
|
14b6eea6e3
|
feat(sandbox): block container namespace joins by default
|
2026-02-24 23:20:34 +00:00 |
|
Peter Steinberger
|
8cc841766c
|
docs(security): enumerate dangerous config parameters
|
2026-02-24 14:25:43 +00:00 |
|
Peter Steinberger
|
4d124e4a9b
|
feat(security): warn on likely multi-user trust-model mismatch
|
2026-02-24 14:03:19 +00:00 |
|
Peter Steinberger
|
cfa44ea6b4
|
fix(security): make allowFrom id-only by default with dangerous name opt-in (#24907)
* fix(channels): default allowFrom to id-only; add dangerous name opt-in
* docs(security): align channel allowFrom docs with id-only default
|
2026-02-24 01:01:51 +00:00 |
|
Brian Mendonca
|
bc78b343ba
|
Security: expand audit checks for mDNS and real-IP fallback
|
2026-02-22 11:26:17 +01:00 |
|
Peter Steinberger
|
265da4dd2a
|
fix(security): harden gateway command/audit guardrails
|
2026-02-22 08:45:48 +01:00 |
|
Peter Steinberger
|
049b8b14bc
|
fix(security): flag open-group runtime/fs exposure in audit
|
2026-02-22 08:22:51 +01:00 |
|
Peter Steinberger
|
f97c45c5b5
|
fix(security): warn on Discord name-based allowlists in audit
|
2026-02-21 19:45:17 +01:00 |
|
Peter Steinberger
|
f48698a50b
|
fix(security): harden sandbox browser network defaults
|
2026-02-21 14:02:53 +01:00 |
|
Peter Steinberger
|
1835dec200
|
fix(security): force sandbox browser hash migration and audit stale labels
|
2026-02-21 13:25:41 +01:00 |
|
Peter Steinberger
|
810218756d
|
docs(security): clarify trusted-host deployment assumptions
|
2026-02-21 12:53:12 +01:00 |
|
Peter Steinberger
|
5dc50b8a3f
|
fix(security): harden npm plugin and hook install integrity flow
|
2026-02-19 15:11:25 +01:00 |
|
Peter Steinberger
|
e3e0ffd801
|
feat(security): audit gateway HTTP no-auth exposure
|
2026-02-19 14:25:56 +01:00 |
|
Peter Steinberger
|
a333d92013
|
docs(security): harden gateway security guidance
|
2026-02-17 23:48:49 +01:00 |
|
Peter Steinberger
|
1def8c5448
|
fix(security): extend audit hardening checks
|
2026-02-13 16:26:58 +01:00 |
|
Peter Steinberger
|
3421b2ec1e
|
fix: harden hook session key routing defaults
|
2026-02-13 02:09:14 +01:00 |
|
Lucas Kim
|
6fdb136688
|
docs: document secure DM mode preset (#7872)
* docs: document secure DM mode preset
* fix: resolve merge conflict in resizable-divider
|
2026-02-04 06:55:13 +00:00 |
|
Seb Slight
|
abcaa8c7a9
|
Docs: add nav titles across docs (#5689)
|
2026-01-31 15:04:03 -06:00 |
|
cpojer
|
8cab78abbc
|
chore: Run pnpm format:fix.
|
2026-01-31 21:13:13 +09:00 |
|
Peter Steinberger
|
9a7160786a
|
refactor: rename to openclaw
|
2026-01-30 03:16:21 +01:00 |
|
Ayaan Zaidi
|
b6a3a91edf
|
fix: wire per-account dm scope guidance (#3095) (thanks @jarvis-sam)
|
2026-01-28 11:42:33 +05:30 |
|
Peter Steinberger
|
6d16a658e5
|
refactor: rename clawdbot to moltbot with legacy compat
|
2026-01-27 12:21:02 +00:00 |
|
Peter Steinberger
|
77d9451712
|
docs: fix mdx in security cli doc
|
2026-01-21 01:24:29 +00:00 |
|
Peter Steinberger
|
51dfd6efdb
|
fix: tighten small-model audit guardrails
|
2026-01-20 23:52:26 +00:00 |
|
Ubuntu
|
ca9688b5cc
|
feat(session): add dmScope for multi-user DM isolation
Co-authored-by: Alphonse-arianee <Alphonse-arianee@users.noreply.github.com>
|
2026-01-16 04:13:10 +00:00 |
|
Peter Steinberger
|
0cbfea79fa
|
docs(cli): add per-command CLI pages
|
2026-01-15 06:13:10 +00:00 |
|