mirror of
https://github.com/openclaw/openclaw.git
synced 2026-07-24 07:05:01 +00:00
Allow the browser upload tool to resolve OpenClaw-managed inbound media refs such as `media://inbound/<id>` and sandbox-relative `media/inbound/<id>` while preserving the existing upload-root path contract.
Keep upload-root files ahead of sandbox-relative inbound fallback, reject nested absolute inbound media files, and validate raw `media://` paths before URL normalization so traversal-shaped refs cannot resolve to direct media ids.
Verification:
- `OPENCLAW_VITEST_MAX_WORKERS=1 node scripts/run-vitest.mjs extensions/browser/src/browser/paths.test.ts --reporter=verbose`
- `OPENCLAW_VITEST_MAX_WORKERS=1 node scripts/run-vitest.mjs extensions/browser/src/browser/paths.test.ts --reporter=dot`
- `OPENCLAW_HEAVY_CHECK_LOCK_SCOPE=worktree node scripts/run-tsgo.mjs -p test/tsconfig/tsconfig.extensions.test.json --incremental --tsBuildInfoFile .artifacts/tsgo-cache/extensions-test.tsbuildinfo`
- `pnpm lint --threads=8`
- `.agents/skills/autoreview/scripts/autoreview --mode branch --base origin/main`
- `git diff --check`
- GitHub PR checks on
|
||
|---|---|---|
| .. | ||
| skills/browser-automation | ||
| src | ||
| browser-bridge.ts | ||
| browser-cdp.ts | ||
| browser-config.ts | ||
| browser-control-auth.ts | ||
| browser-doctor.ts | ||
| browser-host-inspection.ts | ||
| browser-maintenance.ts | ||
| browser-profiles.ts | ||
| browser-runtime-api.ts | ||
| cli-metadata.ts | ||
| index.test.ts | ||
| index.ts | ||
| openclaw.plugin.json | ||
| package.json | ||
| plugin-registration.ts | ||
| register.runtime.ts | ||
| runtime-api.ts | ||
| setup-api.ts | ||
| test-fetch.ts | ||
| test-support.ts | ||
| tsconfig.json | ||