-denylist includes low-level env injection vectors too: LD_, DYLD_, BASH_ENV, ENV, BASH_FUNC_*

-fixed changelog
This commit is contained in:
macm1
2026-02-23 20:34:36 +03:00
parent 9908db2f99
commit 1c2694c526
2 changed files with 4 additions and 1 deletions
-1
View File
@@ -16,7 +16,6 @@ All notable changes to the OpenClaw Assistant Home Assistant Add-on will be docu
### Added
- **`nginx_log_level` option** (`minimal` / `full`, default `minimal`): suppresses repetitive Home Assistant health-check and polling requests (`GET /`, `GET /v1/models`, `POST /tools/invoke`) from the nginx access log.
- New add-on option `gateway_env_vars` and export support for gateway process environment variables with limits (50 vars, key <=255 chars, value <=10000 chars).
## [0.5.50] - 2026-02-23