Weilong Liao 8f356b84c7 fix(core): restrict send_message_to_user to current session (security fix #7822) (#7824) ...

* fix(core): security fix - restrict send_message_to_user to current session only

Closes #7822

SECURITY: Remove the user-controlled 'session' parameter from the
send_message_to_user tool. Previously, a regular user could ask the
LLM to send messages to any arbitrary session (group chat) by
providing a crafted session string, which is a high-risk
vulnerability.

Changes:
- Remove 'session' parameter from tool schema (LLM can no longer
  propose it)
- Always use context.context.event.unified_msg_origin as the target
  session
- Update description to clearly state that messages can only be sent
  to the current user's session

* fix: restore session param but restrict to admin only

- Re-add the  parameter removed in the original PR
- Non-admin users can only send to their own session (current_session)
- Admin users can send to any session via the  param
- Uses  from computer_tools.util (same pattern as fs.py)
- Ref: https://github.com/AstrBotDevs/AstrBot/issues/7822

Co-authored-by: Soulter <soulter@astrbot.app>

* Update message_tools.py

---------

Co-authored-by: AstrBot <bot@astrbot.app>

2026-04-29 00:15:16 +08:00

..

api

feat: add on_agent_begin, on_using_llm_tool, on_llm_tool_respond, on_agent_done event hooks (#7540)

2026-04-14 18:55:05 +08:00

builtin_stars

feat: add /stats command to view conversation token usage (#7831)

2026-04-27 12:59:21 +08:00

cli

chore: bump version to 4.23.6

2026-04-27 13:05:20 +08:00

core

fix(core): restrict send_message_to_user to current session (security fix #7822) (#7824)

2026-04-29 00:15:16 +08:00

dashboard

feat: add attachment saved event handling in chat and live chat routes (#7869)

2026-04-28 17:14:40 +08:00

utils

fix: stabilize packaged runtime pip/ssl behavior and mac font fallback (#5007)

2026-02-10 16:42:43 +09:00

__init__.py

…