4 commits

Author	SHA1	Message	Date
Vincent Koc	c2c19a883d	fix(scripts): reject unsafe bounded response lengths ... Reject unsafe decimal Content-Length values in shared scripts bounded-response helpers before streaming response bodies.\n\nValidation:\n- node --check scripts/lib/bounded-response.mjs\n- direct MJS repro for unsafe Content-Length\n- git diff --check origin/main...HEAD\n- autoreview clean, overall patch correct 0.88\n- exact-head release gate https://github.com/openclaw/openclaw/actions/runs/27845767740	2026-06-20 04:04:40 +08:00
Vincent Koc	4c9b4c32ef	fix(scripts): ignore loose content length headers	2026-06-18 21:05:16 +02:00
Peter Steinberger	58c663920d	docs: document script tests	2026-06-04 20:49:50 -04:00
Vincent Koc	cd3887c28a	fix(scripts): cancel timed-out response bodies	2026-06-02 09:49:02 +02:00