openclaw/docs/security
Jesse Merhi 4ea0556f64
feat: add proxy validation command
Adds `openclaw proxy validate` for operator-managed proxy preflight checks, including allowed/denied destination validation, CLI output, tests, docs, and changelog coverage.

Maintainer follow-ups before landing:
- validate custom allowed URLs before probing;
- use a temporary loopback canary for default denied checks and fail custom denied transport errors as unverifiable;
- redact proxy URL userinfo, query strings, and fragments from text/JSON validation output.

Validation:
- `pnpm test src/infra/net/proxy/proxy-validation.test.ts src/cli/proxy-cli.runtime.test.ts src/cli/proxy-cli.test.ts -- --reporter=verbose`
- `pnpm exec oxfmt --check --threads=1 CHANGELOG.md src/cli/proxy-cli.ts src/cli/proxy-cli.runtime.ts src/cli/proxy-cli.test.ts src/cli/proxy-cli.runtime.test.ts src/infra/net/proxy/proxy-validation.ts src/infra/net/proxy/proxy-validation.test.ts docs/cli/proxy.md docs/security/network-proxy.md`
- `pnpm exec oxlint src/cli/proxy-cli.runtime.ts src/cli/proxy-cli.runtime.test.ts`
- `git diff --check`
- Testbox `pnpm install && OPENCLAW_TESTBOX=1 pnpm check:changed` on `tbx_01kqgz68ff20n3dtrgq0j1mykt`
- GitHub CI success on `321b3aaf2b`
2026-05-01 00:19:55 -05:00
..
CONTRIBUTING-THREAT-MODEL.md docs: full-page sentence-case sweep across 5 worst-offender pages 2026-04-26 23:58:35 -07:00
formal-verification.md docs: add Related sections to remaining platform, reference template, and misc pages 2026-04-23 20:40:15 -07:00
network-proxy.md feat: add proxy validation command 2026-05-01 00:19:55 -05:00
THREAT-MODEL-ATLAS.md docs: sentence-case sweep across 10 more pages 2026-04-27 00:03:18 -07:00