Pavan Kumar Gondhi 49db424c80 fix(qqbot): add SSRF guard to direct-upload URL paths in uploadC2CMedia and uploadGroupMedia [AI-assisted] (#69595) ...

* fix: address issue

* fix: address review feedback

* fix: address PR review feedback

* fix: address PR review feedback

* docs: add changelog entry for PR merge

2026-04-21 10:35:17 +05:30

..

tools

fix: guard qqbot channel API fetch

2026-04-21 00:43:50 +01:00

types

fix(qqbot): declare silk-wasm codec types

2026-03-31 17:30:22 +09:00

utils

refactor: dedupe qqbot helpers

2026-04-21 00:06:19 +01:00

api.security.test.ts

fix(qqbot): add SSRF guard to direct-upload URL paths in uploadC2CMedia and uploadGroupMedia [AI-assisted] (#69595)

2026-04-21 10:35:17 +05:30

api.ts

fix(qqbot): add SSRF guard to direct-upload URL paths in uploadC2CMedia and uploadGroupMedia [AI-assisted] (#69595)

2026-04-21 10:35:17 +05:30

channel-base.ts

refactor: dedupe qqbot helpers

2026-04-21 00:06:19 +01:00

channel-config-shared.ts

perf: optimize bundled extension tests

2026-04-17 16:05:09 +01:00

channel.setup.ts

refactor: dedupe qqbot helpers

2026-04-21 00:06:19 +01:00

channel.ts

refactor: dedupe qqbot helpers

2026-04-21 00:06:19 +01:00

command-auth.test.ts

style: fix extension lint violations

2026-04-06 14:53:55 +01:00

config-record-shared.ts

refactor: dedupe shared string readers

2026-04-07 02:03:33 +01:00

config-schema.ts

refactor: share qqbot speech provider schema

2026-04-20 17:16:27 +01:00

config.test.ts

refactor: dedupe qqbot helpers

2026-04-21 00:06:19 +01:00

config.ts

refactor: dedupe qqbot helpers

2026-04-21 00:06:19 +01:00

gateway.ts

fix(cycles): split small runtime seams

2026-04-10 09:00:19 +01:00

inbound-attachments.ts

refactor: dedupe messaging trimmed readers

2026-04-08 01:36:39 +01:00

known-users.ts

style: fix extension lint violations

2026-04-06 14:53:55 +01:00

manifest-schema.test.ts

perf: optimize bundled extension tests

2026-04-17 16:05:09 +01:00

message-queue.ts

style: fix extension lint violations

2026-04-06 14:53:55 +01:00

outbound-deliver.test.ts

fix(qqbot): guard image-size probe against SSRF (#63495)

2026-04-09 16:48:04 +08:00

outbound-deliver.ts

refactor: dedupe qqbot helpers

2026-04-21 00:06:19 +01:00

outbound.security.test.ts

test(qqbot): share symlink race setup

2026-04-12 05:36:06 +01:00

outbound.ts

fix(qqbot): enforce media storage boundary for all outbound local file paths [AI] (#63271)

2026-04-09 17:56:37 +05:30

proactive.test.ts

fix: honor qqbot default account config

2026-04-03 12:42:18 -05:00

proactive.ts

refactor: dedupe qqbot error formatting

2026-04-07 02:03:33 +01:00

qqbot-test-support.ts

refactor: dedupe qqbot helpers

2026-04-21 00:06:19 +01:00

ref-index-store.ts

style: fix extension lint violations

2026-04-06 14:53:55 +01:00

reply-dispatcher.test.ts

fix(qqbot): restrict structured payload local paths (#58453)

2026-04-02 10:20:52 +01:00

reply-dispatcher.ts

refactor: dedupe qqbot helpers

2026-04-21 00:06:19 +01:00

runtime.ts

fix(plugins): stabilize bundled setup runtimes (#67200)

2026-04-15 12:35:18 -04:00

session-store.test.ts

fix: avoid qqbot session file key collisions

2026-04-10 19:40:18 -05:00

session-store.ts

refactor: dedupe qqbot helpers

2026-04-21 00:06:19 +01:00

setup-surface.ts

refactor: dedupe qqbot helpers

2026-04-21 00:06:19 +01:00

setup.test.ts

refactor: dedupe qqbot helpers

2026-04-21 00:06:19 +01:00

slash-commands.test.ts

perf: optimize bundled extension tests

2026-04-17 16:05:09 +01:00

slash-commands.ts

refactor: share plugin package version lookup

2026-04-20 23:34:19 +01:00

stt.ts

refactor: dedupe messaging trimmed readers

2026-04-08 01:36:39 +01:00

text-utils.ts

…

types.ts

fix(qqbot): add stream config (#63746)

2026-04-09 21:23:33 +08:00

typing-keepalive.ts

style: fix extension lint violations

2026-04-06 14:53:55 +01:00