Skip to content

[codex] Add OpenClaw security roadmap article - #141

Merged
steipete merged 16 commits into
mainfrom
codex/openclaw-security-heading-article
May 15, 2026
Merged

[codex] Add OpenClaw security roadmap article#141
steipete merged 16 commits into
mainfrom
codex/openclaw-security-heading-article

Conversation

@steipete

Copy link
Copy Markdown
Contributor

Summary

  • Add Jesse Merhi's OpenClaw security roadmap article.
  • Apply the fact-check recommendations from the draft review: clear status labels, softened in-flight SQLite wording, Proxyline/proxy boundary precision, ClawHub install-path wording, and current OpenGrep rule count.
  • Add local blog author avatar support so Jesse's portrait renders without requiring an X handle.

Validation

  • bun run build
  • Local preview: http://127.0.0.1:4321/blog/where-openclaw-security-is-heading/
  • Verified article, blog index, and author image via local rendered HTML and image response.

@vercel

vercel Bot commented May 15, 2026

Copy link
Copy Markdown

The latest updates on your projects. Learn more about Vercel for GitHub.

Project Deployment Actions Updated (UTC)
clawd-bot Ready Ready Preview, Comment May 15, 2026 11:43pm
openclaw.ai Ready Ready Preview, Comment May 15, 2026 11:43pm

@chatgpt-codex-connector chatgpt-codex-connector Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: 4df6c62bfb

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

const url = author.url ?? (author.handle ? `https://x.com/${author.handle}` : null);
if (!url) return [];
return [{
label: author.handle ? `@${author.handle}` : new URL(url).hostname.replace(/^www\./, ''),

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

P2 Badge Guard author URL parsing before deriving link labels

getAuthorLinks calls new URL(url) when an author has url but no handle; if authorUrl/links.url is a relative path or any malformed string, this throws TypeError during Astro render and can fail the blog page/build. Since src/content.config.ts currently accepts any string for these fields, a typo or internal-relative author URL is enough to trigger a hard failure instead of gracefully omitting/formatting the label.

Useful? React with 👍 / 👎.

Comment on lines +39 to +40
return [{
label: author.handle ? `@${author.handle}` : new URL(url).hostname.replace(/^www\./, ''),

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Suggested change
return [{
label: author.handle ? `@${author.handle}` : new URL(url).hostname.replace(/^www\./, ''),
let label: string;
if (author.handle) {
label = `@${author.handle}`;
} else {
// Try to extract hostname from URL, fall back to URL string if invalid
try {
label = new URL(url).hostname.replace(/^www\./, '');
} catch {
// If URL is invalid, use the URL string itself as label
label = url;
}
}
return [{
label,

Missing error handling in getAuthorLinks function causes runtime TypeError when author.url is not a valid URL string

Fix on Vercel

@steipete
steipete merged commit 3c43195 into main May 15, 2026
22 checks passed
@steipete
steipete deleted the codex/openclaw-security-heading-article branch May 15, 2026 23:54
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant