main
feat: Enhance console output handling, screenshot capture reliability and enable responses API support
fix MSRC132746: rename validate_save_path to validate_save_file_path and update usage across Excel, PowerPoint, and Word clients
fix: Unauthenticated Mobile MCP access allows remote Android device control and screen disclosure
fix legacy config bug
migrate other config
fix: Handle additional OpenAI API exceptions during model startup probe
weaving mode refactor
Implement task name sanitization and validation to prevent path traversal vulnerabilities
fix: Enhance prompt sanitization to mitigate new injection patterns from MSRC report
fix: Update CommandLineExecutor documentation to clarify application launching without shell and adjust example commands
Implement URL security measures to prevent SSRF attacks: add validation helpers and replace direct URL handling with safe_get in webclient and web_search modules.
Implement security enhancements for COMMAND_RESULTS handling to prevent session squatting and unauthorized result submissions
config transform tools
fix: RDP-safe screenshots via PrintWindow, filter placeholder images in evaluation, fix directory-as-path bug
Task 2: add _iter_embedded_ipv4 and integrate into _is_blocked_ip
revise readme
config doc and readme
Merged PR 1532: cloned from https://github.com/microsoft/UFO/tree/vyokky/dev
Adapt UFO server side to latest client changes
fix bug