mirror of https://github.com/openclaw/openclaw.git synced 2026-08-27 12:56:01 -06:00

Files

T

LZY3538 4e9b1f4775 fix(tlon): bound Urbit auth response body drain to prevent OOM (#109697 )

* fix(tlon): bound Urbit auth response body drain to prevent OOM

Replace the unbounded response.text() body drain (discarded after reading
to finalize set-cookie headers) with a streaming reader capped at 64 KiB.
When no body stream is available, fall back to text() for compatibility.
A hostile or misconfigured Urbit endpoint could previously stream an
arbitrarily large body into memory during login.

Co-Authored-By: Claude <noreply@anthropic.com>

* fix(tlon): add curly braces to drain loop for lint compliance

* fix(tlon): remove unbounded text() fallback, cancel reader in finally

Remove the unbounded response.text() body-less fallback path. When no body
stream is available, there is nothing to drain — cookie headers are already
finalised. Move reader.cancel() into a finally block so the reader is
released even when read() throws.

Co-Authored-By: Claude <noreply@anthropic.com>

---------

Co-authored-by: Claude <noreply@anthropic.com>

2026-07-20 20:05:36 -07:00

src

fix(tlon): bound Urbit auth response body drain to prevent OOM (#109697 )

2026-07-20 20:05:36 -07:00

api.ts

chore(plugins): gate deprecation hygiene in CI and purge internal deprecated usage (#108261 )

2026-07-15 04:15:23 -07:00

channel-plugin-api.ts

docs: document medium extension sources

2026-06-04 21:33:54 -04:00

doctor-contract-api.ts

docs: document medium extension sources