TetraHome/Tetra-AI-HA-App
2
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

-denylist includes low-level env injection vectors too: LD_, DYLD_, BASH_ENV, ENV, BASH_FUNC_*

Browse Source 
-fixed changelog
This commit is contained in:
macm1
2026-02-23 20:34:36 +03:00
parent 9908db2f99
commit 1c2694c526
2 changed files with 4 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
openclaw_assistant/CHANGELOG.md
-1
View File
@@ -16,7 +16,6 @@ All notable changes to the OpenClaw Assistant Home Assistant Add-on will be docu
### Added ### Added
- **`nginx_log_level` option** (`minimal` / `full`, default `minimal`): suppresses repetitive Home Assistant health-check and polling requests (`GET /`, `GET /v1/models`, `POST /tools/invoke`) from the nginx access log. - **`nginx_log_level` option** (`minimal` / `full`, default `minimal`): suppresses repetitive Home Assistant health-check and polling requests (`GET /`, `GET /v1/models`, `POST /tools/invoke`) from the nginx access log.
- New add-on option `gateway_env_vars` and export support for gateway process environment variables with limits (50 vars, key <=255 chars, value <=10000 chars).
## [0.5.50] - 2026-02-23 ## [0.5.50] - 2026-02-23
openclaw_assistant/run.sh
+4
View File
@@ -199,6 +199,10 @@ is_reserved_gateway_env_var() {
HOME|PATH|PWD|OLDPWD|SHLVL|TZ|XDG_CONFIG_HOME|PNPM_HOME|NODE_PATH|NODE_OPTIONS|NODE_NO_WARNINGS) HOME|PATH|PWD|OLDPWD|SHLVL|TZ|XDG_CONFIG_HOME|PNPM_HOME|NODE_PATH|NODE_OPTIONS|NODE_NO_WARNINGS)
return 0 return 0
;; ;;
# Low-level injection vectors that can alter process/linker/shell behavior.
LD_*|DYLD_*|BASH_ENV|ENV|BASH_FUNC_*)
return 0
;;
# Proxy vars managed by add-on options. # Proxy vars managed by add-on options.
HTTP_PROXY|HTTPS_PROXY|NO_PROXY|http_proxy|https_proxy|no_proxy) HTTP_PROXY|HTTPS_PROXY|NO_PROXY|http_proxy|https_proxy|no_proxy)
return 0 return 0