Files
opencloud/package.json
T
Mplan 02399ffae8 fix(security): 修复客户端认证与地图渲染漏洞 (#5)
## 安全修复

- 修复地图标记与悬浮卡片中的存储型 XSS
- 限制登录后的重定向目标为当前站点
- 提前清除邮箱确认和密码重置 URL 中的令牌
- 将 Vite 升级到 8.0.16,修复已公开的高危漏洞
- 收紧 Referrer Policy 并增加 HSTS

## 验证

- `npm audit --audit-level=low`:0 个漏洞
- `npm run build`
- 6 组正常与恶意重定向用例
- 危险 DOM API 残留检查Reviewed-on: #5
2026-07-23 02:41:43 +08:00

34 lines
825 B
JSON

{
"name": "opencloud",
"private": true,
"version": "0.0.0",
"type": "module",
"scripts": {
"dev": "vite",
"check:styles": "node scripts/check-style-system.mjs",
"build": "vue-tsc -b && vite build",
"preview": "vite preview"
},
"dependencies": {
"@amap/amap-jsapi-loader": "^1.0.1",
"@vercel/speed-insights": "^2.0.0",
"naive-ui": "^2.44.1",
"pinia": "^3.0.4",
"vue": "^3.5.34",
"vue-router": "^4.5.0"
},
"devDependencies": {
"@tailwindcss/vite": "^4.3.3",
"@types/node": "^24.12.3",
"@vercel/analytics": "^2.0.1",
"@vicons/tabler": "^0.13.0",
"@vicons/utils": "^0.1.4",
"@vitejs/plugin-vue": "^6.0.6",
"@vue/tsconfig": "^0.9.1",
"tailwindcss": "^4.3.3",
"typescript": "~6.0.2",
"vite": "^8.0.16",
"vue-tsc": "^3.2.8"
}
}