0xRain 94bc62ad46 fix(media): strip MEDIA: lines with local paths instead of leaking as text (#14399) ...

When internal tools (e.g. TTS) emit MEDIA:/tmp/... with absolute paths,
isValidMedia() correctly rejects them for security. However, the rejected
MEDIA: line was kept as visible text in the output, leaking the path to
the user.

Now strip MEDIA: lines that look like local paths even when the path
is invalid, so they never appear as user-visible text.

Closes #14365

Co-authored-by: Echo Ito <echoito@MacBook-Air.local>

2026-02-12 07:45:22 -06:00

..

audio-tags.ts

refactor: unify inline directives and media fetch

2026-01-10 03:01:04 +01:00

audio.ts

chore: Enable "curly" rule to avoid single-statement if confusion/errors.

2026-01-31 16:19:20 +09:00

constants.ts

chore: Enable "curly" rule to avoid single-statement if confusion/errors.

2026-01-31 16:19:20 +09:00

fetch.test.ts

fix: guard remote media fetches with SSRF checks

2026-02-02 04:07:29 -08:00

fetch.ts

fix: guard remote media fetches with SSRF checks

2026-02-02 04:07:29 -08:00

host.test.ts

chore: Enable "experimentalSortImports" in Oxfmt and reformat all imorts.

2026-02-01 10:03:47 +09:00

host.ts

chore: Enable "experimentalSortImports" in Oxfmt and reformat all imorts.

2026-02-01 10:03:47 +09:00

image-ops.ts

chore: Enable "experimentalSortImports" in Oxfmt and reformat all imorts.

2026-02-01 10:03:47 +09:00

input-files.ts

fix: expand SSRF guard coverage

2026-02-02 04:58:32 -08:00

mime.test.ts

fix: add .caf to AUDIO_FILE_EXTENSIONS (#10982)

2026-02-07 18:04:22 -05:00

mime.ts

fix: add .caf to AUDIO_FILE_EXTENSIONS (#10982)

2026-02-07 18:04:22 -05:00

parse.test.ts

fix(media): guard local media reads + accept all path types in MEDIA directive

2026-02-11 15:01:18 -08:00

parse.ts

fix(media): strip MEDIA: lines with local paths instead of leaking as text (#14399)

2026-02-12 07:45:22 -06:00

png-encode.ts

refactor: consolidate PNG encoder and safeParseJson utilities (#12457)

2026-02-09 00:21:54 -08:00

server.test.ts

chore: Enable "experimentalSortImports" in Oxfmt and reformat all imorts.

2026-02-01 10:03:47 +09:00

server.ts

chore: Enable "experimentalSortImports" in Oxfmt and reformat all imorts.

2026-02-01 10:03:47 +09:00

store.header-ext.test.ts

refactor: rename to openclaw

2026-01-30 03:16:21 +01:00

store.redirect.test.ts

chore: Enable "experimentalSortImports" in Oxfmt and reformat all imorts.

2026-02-01 10:03:47 +09:00

store.test.ts

chore: Enable "experimentalSortImports" in Oxfmt and reformat all imorts.

2026-02-01 10:03:47 +09:00

store.ts

chore: Enable "experimentalSortImports" in Oxfmt and reformat all imorts.

2026-02-01 10:03:47 +09:00