 whyour
|
2cab112391
|
fix: 加固安全输入边界并修复订阅兼容性 (#3084)
* fix: harden scoped API inputs and isolate login throttling
* fix: close script path gaps and harden security boundaries
* fix: preserve subscription aliases and avoid extension eval
* fix: allow cancelling invalid historical subscriptions
* fix: make script parent validation explicit for CodeQL
* fix: limit command execution and clarify trusted path branches
* fix: separate diff tool script access from config APIs
* fix: clean up obsolete subscription SSH credentials
|
2026-10-06 18:21:54 +08:00 |
|