A 085759aeaf fix(security): add AWS secret key validation and harden path traversal (#2690) ... - Add validateAwsSecretKey() function checking 40-char format - Validate secret key in loadCredsFromConfig() and lightsailRest() - Add normalize() to canonicalize paths before traversal check - Harden both uploadFile() and downloadFile() path validation - Update test fixtures with properly-formatted mock secret keys - Add test for invalid secret key format rejection Fixes #2686 Fixes #2687 Agent: security-auditor Co-authored-by: B <6723574+louisgv@users.noreply.github.com> Co-authored-by: Claude Sonnet 4.5 <noreply@anthropic.com>		2026-03-16 01:29:01 -07:00
..
cli	fix(security): add AWS secret key validation and harden path traversal (#2690)	2026-03-16 01:29:01 -07:00
shared	feat: add downloadFile to CloudRunner + local OpenClaw config merge (#2636)	2026-03-14 15:47:32 -07:00