From 1c2694c526a43dc1ab14ed7ccb2266c5aedab97a Mon Sep 17 00:00:00 2001 From: macm1 Date: Mon, 23 Feb 2026 20:34:36 +0300 Subject: [PATCH] -denylist includes low-level env injection vectors too: LD_, DYLD_, BASH_ENV, ENV, BASH_FUNC_* -fixed changelog --- openclaw_assistant/CHANGELOG.md | 1 - openclaw_assistant/run.sh | 4 ++++ 2 files changed, 4 insertions(+), 1 deletion(-) diff --git a/openclaw_assistant/CHANGELOG.md b/openclaw_assistant/CHANGELOG.md index 2cbbf10..b00b7c8 100644 --- a/openclaw_assistant/CHANGELOG.md +++ b/openclaw_assistant/CHANGELOG.md @@ -16,7 +16,6 @@ All notable changes to the OpenClaw Assistant Home Assistant Add-on will be docu ### Added - **`nginx_log_level` option** (`minimal` / `full`, default `minimal`): suppresses repetitive Home Assistant health-check and polling requests (`GET /`, `GET /v1/models`, `POST /tools/invoke`) from the nginx access log. -- New add-on option `gateway_env_vars` and export support for gateway process environment variables with limits (50 vars, key <=255 chars, value <=10000 chars). ## [0.5.50] - 2026-02-23 diff --git a/openclaw_assistant/run.sh b/openclaw_assistant/run.sh index 21d5b13..5d62dea 100644 --- a/openclaw_assistant/run.sh +++ b/openclaw_assistant/run.sh @@ -199,6 +199,10 @@ is_reserved_gateway_env_var() { HOME|PATH|PWD|OLDPWD|SHLVL|TZ|XDG_CONFIG_HOME|PNPM_HOME|NODE_PATH|NODE_OPTIONS|NODE_NO_WARNINGS) return 0 ;; + # Low-level injection vectors that can alter process/linker/shell behavior. + LD_*|DYLD_*|BASH_ENV|ENV|BASH_FUNC_*) + return 0 + ;; # Proxy vars managed by add-on options. HTTP_PROXY|HTTPS_PROXY|NO_PROXY|http_proxy|https_proxy|no_proxy) return 0