Soulter 59fa9fdeaa fix(core): security fix - restrict send_message_to_user to current session only ...

Closes #7822

SECURITY: Remove the user-controlled 'session' parameter from the
send_message_to_user tool. Previously, a regular user could ask the
LLM to send messages to any arbitrary session (group chat) by
providing a crafted session string, which is a high-risk
vulnerability.

Changes:
- Remove 'session' parameter from tool schema (LLM can no longer
  propose it)
- Always use context.context.event.unified_msg_origin as the target
  session
- Update description to clearly state that messages can only be sent
  to the current user's session

2026-04-27 02:07:52 +08:00

..

agent

perf: improve tool calls in reasoning and multiple tool calls display (#7742)

2026-04-23 17:46:53 +08:00

backup

feat: add inline message editing and regeneration functionality for webui (#7673)

2026-04-22 11:51:12 +08:00

computer

perf: update FileReadTool description to mention image, PDF and docx support, and enhance modality checking in tool result case (#7506)

2026-04-22 11:38:40 +08:00

config

feat: add Firecrawl web search tools (#7764)

2026-04-26 13:07:27 +08:00

cron

fix: display cron last_run_at in local timezone (#7625)

2026-04-17 18:36:47 +08:00

db

feat: add inline message editing and regeneration functionality for webui (#7673)

2026-04-22 11:51:12 +08:00

knowledge_base

feat: add epub support for knowledge base document upload (#7594)

2026-04-20 15:24:07 +08:00

message

feat: add audio input support across providers and chatui recording issue fix (#7378)

2026-04-06 14:58:29 +08:00

pipeline

feat: add inline message editing and regeneration functionality for webui (#7673)

2026-04-22 11:51:12 +08:00

platform

feat: add deduplication for WeChat kefu text messages within 15 seconds (#7788)

2026-04-25 16:26:30 +08:00

provider

[fix] 将Minimax TTS默认输出格式改为wav以解决RIFF错误 (#7797)

2026-04-26 23:06:54 +08:00

skills

fix: allow multiple skills in a single zip archive (#7070)

2026-03-28 21:16:40 +08:00

star

fix: add missing platform adapter filter types (#7738)

2026-04-23 13:42:45 +08:00

tools

fix(core): security fix - restrict send_message_to_user to current session only

2026-04-27 02:07:52 +08:00

utils

fix(core): downscale oversized images (#7807)

2026-04-26 23:10:58 +08:00

__init__.py

fix: 插件依赖自动安装逻辑与 Dashboard 安装体验优化 (#5954)

2026-03-11 14:21:55 +09:00

astr_agent_context.py

…

astr_agent_hooks.py

feat: add on_agent_begin, on_using_llm_tool, on_llm_tool_respond, on_agent_done event hooks (#7540)

2026-04-14 18:55:05 +08:00

astr_agent_run_util.py

perf: improve tool calls in reasoning and multiple tool calls display (#7742)

2026-04-23 17:46:53 +08:00

astr_agent_tool_exec.py

feat: filesystem grep, read, write, edit file and workspace support (#7402)

2026-04-11 17:01:54 +08:00

astr_main_agent_resources.py

feat: filesystem grep, read, write, edit file and workspace support (#7402)

2026-04-11 17:01:54 +08:00

astr_main_agent.py

feat: add Firecrawl web search tools (#7764)

2026-04-26 13:07:27 +08:00

astrbot_config_mgr.py

chore: auto ann fix by ruff (#4903)

2026-02-09 00:22:24 +08:00

conversation_mgr.py

fix: resolve unhandled UTC timezone offset for timestamps in conversation records (#5580)

2026-03-01 16:10:35 +09:00

core_lifecycle.py

test: add comprehensive tests for core lifecycle and agent execution (#5357)

2026-03-01 00:23:47 +08:00

event_bus.py

test: add comprehensive tests for core lifecycle and agent execution (#5357)

2026-03-01 00:23:47 +08:00

exceptions.py

fix: improve knowledge base upload error messages (#7534)

2026-04-14 16:27:06 +08:00

file_token_service.py

chore: auto ann fix by ruff (#4903)

2026-02-09 00:22:24 +08:00

initial_loader.py

chore: auto ann fix by ruff (#4903)

2026-02-09 00:22:24 +08:00

log.py

refactor: bundled webui static files into wheel and replace astrbot cli log with English (#5665)

2026-03-03 12:58:59 +08:00

persona_error_reply.py

feat: support persona custom error reply message with fallback (#5547)

2026-02-28 13:34:12 +09:00

persona_mgr.py

fix: subagent lookup failure when using default persona (#5672)

2026-03-17 15:42:15 +08:00

platform_message_history_mgr.py

feat: add inline message editing and regeneration functionality for webui (#7673)

2026-04-22 11:51:12 +08:00

sentinels.py

feat: support persona custom error reply message with fallback (#5547)

2026-02-28 13:34:12 +09:00

subagent_orchestrator.py

fix: subagent lookup failure when using default persona (#5672)

2026-03-17 15:42:15 +08:00

umop_config_router.py

perf: enhance umo processing compatibility (#5996)

2026-03-16 12:34:21 +08:00

updator.py

fix: support SOCKS proxies in updater requests (#7615)

2026-04-17 13:13:21 +09:00

zip_updator.py

fix: support SOCKS proxies in updater requests (#7615)

2026-04-17 13:13:21 +09:00