 Mplan
|
02399ffae8
|
fix(security): 修复客户端认证与地图渲染漏洞 (#5)
## 安全修复
- 修复地图标记与悬浮卡片中的存储型 XSS
- 限制登录后的重定向目标为当前站点
- 提前清除邮箱确认和密码重置 URL 中的令牌
- 将 Vite 升级到 8.0.16，修复已公开的高危漏洞
- 收紧 Referrer Policy 并增加 HSTS
## 验证
- `npm audit --audit-level=low`：0 个漏洞
- `npm run build`
- 6 组正常与恶意重定向用例
- 危险 DOM API 残留检查Reviewed-on: #5
|
2026-07-23 02:41:43 +08:00 |
|
|
Mplan
|
51743645e2
|
后端迁移到fastapi (#3)
Reviewed-on: #3
|
2026-07-18 20:49:09 +08:00 |
|
|
Mplan
|
217b81c506
|
优化密码找回流程、管理后台批量操作和上传体验 (#2)
Reviewed-on: #2
|
2026-05-31 17:00:16 +08:00 |
|
|
Mplan
|
599c8107d1
|
chore: add vercel analytics
|
2026-05-22 11:09:14 +08:00 |
|
|
Mplan
|
f35baf4a67
|
feat: add fallback pages and refine page interactions
|
2026-05-22 00:09:00 +08:00 |
|
|
Mplan
|
78b1c952e7
|
feat: adopt naive ui and refine shell interactions
|
2026-05-21 20:53:24 +08:00 |
|
|
Mplan
|
c49ac7a42e
|
feat: scaffold infrastructure - router, pinia, tailwind, amap, auth store, page placeholders
|
2026-05-20 23:31:55 +08:00 |
|
|
Mplan
|
71a08bc4dc
|
init: project scaffold with Vue + Vite + Supabase
|
2026-05-20 22:34:08 +08:00 |
|