openclaw/clawhub
1
0
Fork 0
mirror of https://github.com/openclaw/clawhub.git synced 2026-07-21 11:15:26 -04:00
Code Issues 183 Packages Projects Releases 1 Wiki Activity

[PR #63] fix: harden raw file responses #241

New Issue
Open
opened 2026-02-15 17:16:27 -05:00 by yindo · 0 comments
yindo commented 2026-02-15 17:16:27 -05:00
Owner
Copy Link
Copy Source

📋 Pull Request Information

Original PR: https://github.com/openclaw/clawhub/pull/63
Author: @joshp123
Created: 1/28/2026
Status: 🔄 Open

Base: main ← Head: fix/raw-file-hardening

📝 Commits (3)

  • b34a050 🤖 fix: harden raw file responses
  • 7c5b9d6 🤖 fix: block svg skill files
  • d7e495f 🤖 fix: add security headers

📊 Changes

5 files changed (+99 additions, -20 deletions)

View changed files

📝 convex/httpApiV1.handlers.test.ts (+51 -2)
📝 convex/httpApiV1.ts (+16 -18)
📝 convex/lib/skills.test.ts (+2 -0)
📝 convex/lib/skills.ts (+2 -0)
➕ server/middleware/securityHeaders.ts (+28 -0)

📄 Description

Summary

  • force raw file endpoints to serve text/plain with CSP sandbox + nosniff
  • add regression coverage for skill/soul raw file headers
  • block SVG files in text file validation
  • add security headers middleware (CSP + hardening) for HTML responses

Testing

  • bun run lint:biome
  • bun run lint:oxlint

🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.

## 📋 Pull Request Information **Original PR:** https://github.com/openclaw/clawhub/pull/63 **Author:** [@joshp123](https://github.com/joshp123) **Created:** 1/28/2026 **Status:** 🔄 Open **Base:** `main` ← **Head:** `fix/raw-file-hardening` --- ### 📝 Commits (3) - [`b34a050`](https://github.com/openclaw/clawhub/commit/b34a05080ce474eb66a6711abd90801be18fcd93) 🤖 fix: harden raw file responses - [`7c5b9d6`](https://github.com/openclaw/clawhub/commit/7c5b9d6bccba01b9457db4e110ad1f873faba40d) 🤖 fix: block svg skill files - [`d7e495f`](https://github.com/openclaw/clawhub/commit/d7e495fc4ab66e05eae3e7a0969db1e8ed9801cf) 🤖 fix: add security headers ### 📊 Changes **5 files changed** (+99 additions, -20 deletions) <details> <summary>View changed files</summary> 📝 `convex/httpApiV1.handlers.test.ts` (+51 -2) 📝 `convex/httpApiV1.ts` (+16 -18) 📝 `convex/lib/skills.test.ts` (+2 -0) 📝 `convex/lib/skills.ts` (+2 -0) ➕ `server/middleware/securityHeaders.ts` (+28 -0) </details> ### 📄 Description ## Summary - force raw file endpoints to serve text/plain with CSP sandbox + nosniff - add regression coverage for skill/soul raw file headers - block SVG files in text file validation - add security headers middleware (CSP + hardening) for HTML responses ## Testing - bun run lint:biome - bun run lint:oxlint --- <sub>🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.</sub>
yindo added the pull-request label 2026-02-15 17:16:27 -05:00
Sign in to join this conversation.
No Branch/Tag Specified
Branches Tags
Labels
Clear labels
bug
pull-request
Mirrored from GitHub Pull Request
No Label pull-request
Milestone
No items
No Milestone
Projects
Clear projects
No project
Assignees
Clear assignees
yindo
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: openclaw/clawhub#241
Delete Branch "%!s()"

Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?