admin/ComfyUI-OpenClaw
1
0
Fork 0
mirror of https://github.com/rookiestar28/ComfyUI-OpenClaw.git synced 2026-08-14 08:52:45 +00:00
Code Issues Packages Projects Releases Wiki Activity

test(security): harden notification regex sanitization

Browse Source
This commit is contained in:
rookiestar28
2026-04-08 02:19:21 +08:00
parent 92ebb2b113
commit 728aeefb4a
1 changed files with 9 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
tests/e2e/specs/notifications.spec.js
+9 -1
View File
@@ -19,9 +19,17 @@ function isApiCandidatePath(pathname, suffix) {
return isPath(normalized, suffix);
}
function escapeRegExpFragment(value) {
// IMPORTANT: keep full regex escaping here. Escaping only slashes leaves
// the CodeQL-flagged sanitization gap in this test-side route matcher.
return String(value || "").replace(/[|\\{}()[\]^$+*?./]/g, "\\$&");
}
function modelManagerRoutePattern(suffix) {
const normalizedSuffix = String(suffix || "").replace(/\/+$/, "");
return new RegExp(`/(?:api/)?(?:openclaw|moltbot)${normalizedSuffix.replace(/\//g, "\\/")}(?:\\?.*)?$`);
return new RegExp(
`/(?:api/)?(?:openclaw|moltbot)${escapeRegExpFragment(normalizedSuffix)}(?:\\?.*)?$`,
);
}
async function readNotificationEntries(page) {