opencloud

45 Commits 6 Branches 0 Tags

3 Commits

Include renames

Author	SHA1	Message	Date
Mplan	02399ffae8	fix(security): 修复客户端认证与地图渲染漏洞 (#5 ) ## 安全修复 - 修复地图标记与悬浮卡片中的存储型 XSS - 限制登录后的重定向目标为当前站点 - 提前清除邮箱确认和密码重置 URL 中的令牌 - 将 Vite 升级到 8.0.16，修复已公开的高危漏洞 - 收紧 Referrer Policy 并增加 HSTS ## 验证 - `npm audit --audit-level=low`：0 个漏洞 - `npm run build` - 6 组正常与恶意重定向用例 - 危险 DOM API 残留检查Reviewed-on: #5	2026-07-23 02:41:43 +08:00
Mplan	582a4214b6	Add SEO metadata and security headers	2026-05-23 11:17:29 +08:00
Mplan	9150a17097	feat: add admin console and account settings Implement the admin dashboard with review, user, and image management workflows. Add profile settings, password reset, pending upload defaults, community placeholder routing, Vercel SPA rewrites, refreshed header styling, and the OpenCloud color-system skill.	2026-05-22 21:04:49 +08:00

Author

SHA1

Message

Date

Mplan

02399ffae8

fix(security): 修复客户端认证与地图渲染漏洞 (#5 )

## 安全修复

- 修复地图标记与悬浮卡片中的存储型 XSS
- 限制登录后的重定向目标为当前站点
- 提前清除邮箱确认和密码重置 URL 中的令牌
- 将 Vite 升级到 8.0.16，修复已公开的高危漏洞
- 收紧 Referrer Policy 并增加 HSTS

## 验证

- `npm audit --audit-level=low`：0 个漏洞
- `npm run build`
- 6 组正常与恶意重定向用例
- 危险 DOM API 残留检查Reviewed-on: #5

2026-07-23 02:41:43 +08:00

Mplan

582a4214b6

Add SEO metadata and security headers

2026-05-23 11:17:29 +08:00

Mplan

9150a17097

feat: add admin console and account settings

Implement the admin dashboard with review, user, and image management workflows. Add profile settings, password reset, pending upload defaults, community placeholder routing, Vercel SPA rewrites, refreshed header styling, and the OpenCloud color-system skill.

2026-05-22 21:04:49 +08:00