Commit Graph
11 Commits
Author SHA1 Message Date
Mplan 8ae004b466 fix(auth): improve password form autocomplete 2026-07-28 23:27:59 +08:00
Mplan ccf7049ae0 统一交互组件 (#7)
Reviewed-on: #7
2026-07-28 21:31:38 +08:00
Mplan 02399ffae8 fix(security): 修复客户端认证与地图渲染漏洞 (#5)
## 安全修复

- 修复地图标记与悬浮卡片中的存储型 XSS
- 限制登录后的重定向目标为当前站点
- 提前清除邮箱确认和密码重置 URL 中的令牌
- 将 Vite 升级到 8.0.16,修复已公开的高危漏洞
- 收紧 Referrer Policy 并增加 HSTS

## 验证

- `npm audit --audit-level=low`:0 个漏洞
- `npm run build`
- 6 组正常与恶意重定向用例
- 危险 DOM API 残留检查Reviewed-on: #5
2026-07-23 02:41:43 +08:00
Mplan 16b3dd4aaa refactor(styles): 建立统一的生产级样式体系 (#4)
## 变更内容

- 将全局样式拆分为设计令牌、基础规则和语义组件层
- 集中管理 Naive UI 主题配置
- 迁移页面容器、表单、信息面板和按钮等重复样式
- 增加样式体系文档与自动契约检查

## 验证

- `npm run check:styles`
- `npm run build`Reviewed-on: #4
2026-07-23 02:41:04 +08:00
Mplan 51743645e2 后端迁移到fastapi (#3)
Reviewed-on: #3
2026-07-18 20:49:09 +08:00
Mplan 217b81c506 优化密码找回流程、管理后台批量操作和上传体验 (#2)
Reviewed-on: #2
2026-05-31 17:00:16 +08:00
Mplan e087dd46e2 #1 大幅改进页面显示效果 (#1)
Reviewed-on: #1
2026-05-30 00:39:20 +08:00
Mplan 9150a17097 feat: add admin console and account settings
Implement the admin dashboard with review, user, and image management workflows. Add profile settings, password reset, pending upload defaults, community placeholder routing, Vercel SPA rewrites, refreshed header styling, and the OpenCloud color-system skill.
2026-05-22 21:04:49 +08:00
Mplan 78b1c952e7 feat: adopt naive ui and refine shell interactions 2026-05-21 20:53:24 +08:00
Mplan d4b07fba58 feat: complete auth flow - email confirmation, login state, route guards 2026-05-21 00:21:28 +08:00
Mplan c49ac7a42e feat: scaffold infrastructure - router, pinia, tailwind, amap, auth store, page placeholders 2026-05-20 23:31:55 +08:00