Commit Graph
6 Commits
Author SHA1 Message Date
Mplan 8ae004b466 fix(auth): improve password form autocomplete 2026-07-28 23:27:59 +08:00
Mplan 02399ffae8 fix(security): 修复客户端认证与地图渲染漏洞 (#5)
## 安全修复

- 修复地图标记与悬浮卡片中的存储型 XSS
- 限制登录后的重定向目标为当前站点
- 提前清除邮箱确认和密码重置 URL 中的令牌
- 将 Vite 升级到 8.0.16,修复已公开的高危漏洞
- 收紧 Referrer Policy 并增加 HSTS

## 验证

- `npm audit --audit-level=low`:0 个漏洞
- `npm run build`
- 6 组正常与恶意重定向用例
- 危险 DOM API 残留检查Reviewed-on: #5
2026-07-23 02:41:43 +08:00
Mplan 51743645e2 后端迁移到fastapi (#3)
Reviewed-on: #3
2026-07-18 20:49:09 +08:00
Mplan 217b81c506 优化密码找回流程、管理后台批量操作和上传体验 (#2)
Reviewed-on: #2
2026-05-31 17:00:16 +08:00
Mplan e087dd46e2 #1 大幅改进页面显示效果 (#1)
Reviewed-on: #1
2026-05-30 00:39:20 +08:00
Mplan 9150a17097 feat: add admin console and account settings
Implement the admin dashboard with review, user, and image management workflows. Add profile settings, password reset, pending upload defaults, community placeholder routing, Vercel SPA rewrites, refreshed header styling, and the OpenCloud color-system skill.
2026-05-22 21:04:49 +08:00