vrr/openclaw
2
0
Fork 0
mirror of https://github.com/openclaw/openclaw.git synced 2026-05-19 16:25:50 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 18
openclaw/docs/security
History
Jesse Merhi d5b0083300
fix: proxy direct APNs HTTP2 sessions (#74905) 
Summary:
- This PR routes direct APNs HTTP/2 sends through an APNs allowlisted managed-proxy CONNECT wrapper, adds APNs proxy validation/docs/guardrails, and expands regression and live-test coverage.
- Reproducibility: yes. source-reproducible: current main `sendApnsRequest()` still uses raw `http2.connect(au ... nly covers HTTP/global-agent/Undici hooks. I did not run a live APNs reproduction in this read-only review.

Automerge notes:
- PR branch already contained follow-up commit before automerge: test: guard raw HTTP2 APNs connections
- PR branch already contained follow-up commit before automerge: test: guard raw HTTP2 with OpenGrep
- PR branch already contained follow-up commit before automerge: lint: ban raw HTTP2 imports
- PR branch already contained follow-up commit before automerge: fix: use managed proxy state for APNs
- PR branch already contained follow-up commit before automerge: test: exercise APNs active proxy state
- PR branch already contained follow-up commit before automerge: fix: reject conflicting managed proxy activation

Validation:
- ClawSweeper review passed for head dab7c86a75.
- Required merge gates passed before the squash merge.

Prepared head SHA: dab7c86a75
Review: https://github.com/openclaw/openclaw/pull/74905#issuecomment-4350181159

Co-authored-by: jesse-merhi <79823012+jesse-merhi@users.noreply.github.com>
Co-authored-by: clawsweeper <274271284+clawsweeper[bot]@users.noreply.github.com>
2026-05-04 11:04:17 +00:00
..
CONTRIBUTING-THREAT-MODEL.md docs: full-page sentence-case sweep across 5 worst-offender pages 2026-04-26 23:58:35 -07:00
formal-verification.md docs: add Related sections to remaining platform, reference template, and misc pages 2026-04-23 20:40:15 -07:00
incident-response.md docs: move incident response plan 2026-05-03 12:30:11 +01:00
network-proxy.md fix: proxy direct APNs HTTP2 sessions (#74905) 2026-05-04 11:04:17 +00:00
THREAT-MODEL-ATLAS.md docs: sentence-case sweep across 10 more pages 2026-04-27 00:03:18 -07:00