fix(core): restrict send_message_to_user to current session (security fix #7822)#7824

Merged

Soulter merged 3 commits intoAstrBotDevs:masterfrom

Soulter:fix/issue-7822-send-message-security

Apr 28, 2026

Commits on Apr 26, 2026

fix(core): security fix - restrict send_message_to_user to current session only
Soulter
committed

Commits on Apr 28, 2026

fix: restore session param but restrict to admin only

AstrBot
and
Soulter
committed
Update message_tools.py
Soulter
authored