Skip to content

feat: Add allowedOrigins config for openclaw#12162

Merged
f2c-ci-robot[bot] merged 1 commit intodev-v2from
pr@dev-v2@agent
Mar 12, 2026
Merged

feat: Add allowedOrigins config for openclaw#12162
f2c-ci-robot[bot] merged 1 commit intodev-v2from
pr@dev-v2@agent

Conversation

@zhengkunwang223
Copy link
Member

No description provided.

@f2c-ci-robot
Copy link

f2c-ci-robot bot commented Mar 12, 2026

Adding the "do-not-merge/release-note-label-needed" label because no release-note block was detected, please follow our release note process to remove it.

Details

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository.

@sonarqubecloud
Copy link

Copy link

@chatgpt-codex-connector chatgpt-codex-connector bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: 9048ae11d9

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

Comment on lines +1492 to +1496
setBrowserConfig(conf, browserConfig{
Enabled: config.BrowserEnabled,
ExecutablePath: defaultBrowserExecutablePath,
Headless: true,
NoSandbox: true,

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

P2 Badge Preserve browser runtime flags when saving other settings

Saving the "Other" form now rewrites the full browser block with hard-coded values, so a user changing only timezone/browser-enabled can unintentionally lose existing headless, noSandbox, and profile behavior that was previously configurable. This is a regression for existing agents that already have non-default browser settings (from earlier UI versions or manual config edits), because an unrelated settings save silently mutates runtime browser behavior.

Useful? React with 👍 / 👎.

if (!target || !port) {
return '';
}
return `http://${target}:${port}`;

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

P2 Badge Format IPv6 host correctly in default allowed origin

The default origin builder concatenates systemIP directly into http://<ip>:<port>, which produces invalid URLs for IPv6 values (for example http://2001:db8::1:18789 instead of bracketed host form). In IPv6 environments this makes the auto-filled allowed-origins value invalid and fails validation in the create flow unless users manually fix the format.

Useful? React with 👍 / 👎.

Copy link
Member

@wanghe-fit2cloud wanghe-fit2cloud left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

/lgtm

@wanghe-fit2cloud
Copy link
Member

/approve

@f2c-ci-robot f2c-ci-robot bot added the lgtm label Mar 12, 2026
@f2c-ci-robot
Copy link

f2c-ci-robot bot commented Mar 12, 2026

[APPROVALNOTIFIER] This PR is APPROVED

This pull-request has been approved by: wanghe-fit2cloud

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Details Needs approval from an approver in each of these files:

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

@f2c-ci-robot f2c-ci-robot bot merged commit 869ee75 into dev-v2 Mar 12, 2026
6 checks passed
@f2c-ci-robot f2c-ci-robot bot deleted the pr@dev-v2@agent branch March 12, 2026 09:37
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants