David RudduckandPeter Steinberger 5643a93479 fix(security): default standalone servers to loopback bind (#13184) ...

* fix(security): default standalone servers to loopback bind (#4)

Change canvas host and telegram webhook default bind from 0.0.0.0
(all interfaces) to 127.0.0.1 (loopback only) to prevent unintended
network exposure when no explicit host is configured.

* fix: restore telegram webhook host override while keeping loopback defaults (openclaw#13184) thanks @davidrudduck

* style: format telegram docs after rebase (openclaw#13184) thanks @davidrudduck

---------

Co-authored-by: Peter Steinberger <[email protected]>

2026-02-13 16:39:56 +01:00

..

acp

fix: close OC-02 gaps in ACP permission + gateway HTTP deny config (#15390) (thanks @aether-ai-agent)

2026-02-13 14:30:06 +01:00

agents

fix: execute sandboxed file ops inside containers (#4026)

2026-02-13 16:29:10 +01:00

auto-reply

perf(test): remove redundant status module reloads

2026-02-13 15:11:38 +00:00

browser

perf(test): remove module reloads in browser and embedding suites

2026-02-13 15:31:17 +00:00

canvas-host

fix(security): default standalone servers to loopback bind (#13184)

2026-02-13 16:39:56 +01:00

channels

fix(outbound): return error instead of silently redirecting to allowList[0] (#13578)

2026-02-13 05:20:03 +01:00

cli

feat(agents) : Hugging Face Inference provider first-class support and Together API fix and Direct Injection Refactor Auths [AI-assisted] (#13472)

2026-02-13 16:18:16 +01:00

commands

fix(onboard): include vllm auth group id

2026-02-13 15:23:46 +00:00

compat

…

config

fix(security): default standalone servers to loopback bind (#13184)

2026-02-13 16:39:56 +01:00

cron

test: migrate suites to e2e coverage layout

2026-02-13 14:28:22 +00:00

daemon

perf(test): optimize heavy suites and stabilize lock timing

2026-02-13 13:29:07 +00:00

discord

test: migrate suites to e2e coverage layout

2026-02-13 14:28:22 +00:00

docs

…

gateway

fix: Finish credential redaction that was merged unfinished (#13073)

2026-02-13 16:19:21 +01:00

hooks

perf(test): optimize heavy suites and stabilize lock timing

2026-02-13 13:29:07 +00:00

imessage

…

infra

test: migrate suites to e2e coverage layout

2026-02-13 14:28:22 +00:00

line

…

link-understanding

…

logging

perf(test): trim module resets in config suites

2026-02-13 15:11:38 +00:00

macos

…

markdown

…

media

fix: harden OpenResponses URL input fetching

2026-02-13 01:38:49 +01:00

media-understanding

feat(agents) : Hugging Face Inference provider first-class support and Together API fix and Direct Injection Refactor Auths [AI-assisted] (#13472)

2026-02-13 16:18:16 +01:00

memory

perf(test): remove module reloads in browser and embedding suites

2026-02-13 15:31:17 +00:00

node-host

…

pairing

…

plugin-sdk

…

plugins

test: migrate suites to e2e coverage layout

2026-02-13 14:28:22 +00:00

process

test: migrate suites to e2e coverage layout

2026-02-13 14:28:22 +00:00

providers

…

routing

fix: add discord role allowlists (#10650) (thanks @Minidoracat)

2026-02-12 19:52:24 -06:00

scripts

…

security

fix(security): extend audit hardening checks

2026-02-13 16:26:58 +01:00

sessions

fix: preserve inter-session input provenance (thanks @anbecker)

2026-02-13 02:02:01 +01:00

shared/text

…

signal

perf(test): reduce module reload churn in unit suites

2026-02-13 15:19:13 +00:00

slack

perf(test): reduce module reload churn in unit suites

2026-02-13 15:19:13 +00:00

telegram

fix(security): default standalone servers to loopback bind (#13184)

2026-02-13 16:39:56 +01:00

terminal

fix(onboarding): exit cleanly after web ui hatch

2026-02-13 03:20:32 +01:00

test-helpers

…

test-utils

…

tts

TTS: add missing OpenAI voices (ballad, cedar, juniper, marin, verse) (openclaw#11020) thanks @lailoo

2026-02-13 07:54:00 -06:00

tui

…

types

…

utils

…

web

fix: execute sandboxed file ops inside containers (#4026)

2026-02-13 16:29:10 +01:00

whatsapp

…

wizard

fix: avoid unused custom preferred provider

2026-02-13 15:48:37 +01:00

channel-web.barrel.test.ts

…

channel-web.ts

…

docker-setup.test.ts

fix(tts): strip markdown before sending text to TTS engines (#13237)

2026-02-12 10:46:57 -05:00

entry.ts

…

extensionAPI.ts

…

globals.test.ts

…

globals.ts

…

index.test.ts

…

index.ts

…

logger.test.ts

…

logger.ts

…

logging.ts

…

polls.test.ts

…

polls.ts

…

runtime.ts

…

utils.test.ts

…

utils.ts

…

version.test.ts

…

version.ts

…