 whyour
|
2cab112391
|
fix: 加固安全输入边界并修复订阅兼容性 (#3084)
* fix: harden scoped API inputs and isolate login throttling
* fix: close script path gaps and harden security boundaries
* fix: preserve subscription aliases and avoid extension eval
* fix: allow cancelling invalid historical subscriptions
* fix: make script parent validation explicit for CodeQL
* fix: limit command execution and clarify trusted path branches
* fix: separate diff tool script access from config APIs
* fix: clean up obsolete subscription SSH credentials
|
2026-10-06 18:21:54 +08:00 |
|
|
whyour
|
3d2b98a442
|
fix: scope file access restrictions and honor custom data directories
|
2026-09-30 21:21:35 +08:00 |
|
|
whyour
|
4df52094f2
|
fix: harden authentication and file access security
|
2026-09-05 18:19:01 +08:00 |
|
|
whyour
|
d1dfde3ca9
|
修复配置文件路径可能越权
|
2026-06-12 23:45:40 +08:00 |
|
|
whyour
|
6796068523
|
更新国际化文案
|
2026-06-11 23:18:45 +08:00 |
|
|
whyour
|
95459c33ed
|
修改 import undici
|
2025-05-15 01:19:24 +08:00 |
|
|
whyour
|
c3072e7712
|
got 替换为 uudici
|
2025-05-15 01:01:39 +08:00 |
|
|
whyour
|
a0613d0f39
|
修复文件越权访问
|
2024-09-04 23:25:48 +08:00 |
|
|
whyour
|
e83058c3bc
|
兼容脚本、日志、配置文件详情接口
|
2024-02-08 20:47:03 +08:00 |
|