Agustin Rivera b860a0d4d0 fix: harden qqbot direct media uploads ...

Harden QQBot direct media URL uploads by downloading through the local SSRF guard before QQ upload, disabling redirects, bounding fetch/setup and body reads, and routing downloaded buffers through the existing one-shot/chunked size gate.

Co-authored-by: Agustin Rivera <agustin@rivera-web.com>

2026-05-28 04:21:46 +01:00

..

skills

fix(qqbot): translate skill descriptions (#78153)

2026-05-09 20:05:45 -04:00

src

fix: harden qqbot direct media uploads

2026-05-28 04:21:46 +01:00

api.ts

refactor: pin remaining extension api surfaces

2026-04-27 21:02:53 +01:00

channel-plugin-api.ts

test(ci): reduce channel contract import cost

2026-04-21 00:40:07 +01:00

index.ts

feat(qqbot): resolve clientSecret SecretRefs and add secret contract

2026-05-03 12:25:08 +01:00

npm-shrinkwrap.json

chore(release): prepare 2026.5.28

2026-05-28 01:48:07 +01:00

openclaw.plugin.json

fix: add ClawHub plugin display names (#87354)

2026-05-27 12:37:35 -05:00

package.json

chore(release): prepare 2026.5.28

2026-05-28 01:48:07 +01:00

runtime-api.ts

refactor: reduce plugin sdk surface

2026-05-10 12:37:10 +01:00

secret-contract-api.ts

feat(qqbot): resolve clientSecret SecretRefs and add secret contract

2026-05-03 12:25:08 +01:00

setup-entry.ts

Revert "refactor: move runtime state to SQLite"

2026-05-13 13:33:38 +01:00

setup-plugin-api.ts

fix(channels): keep bundled setup entries dependency-light

2026-04-24 06:10:07 +01:00

tsconfig.json

…