whyour 442ab2c616 fix(security): restrict task environment controls and app scopes (#3121) ...

* fix(security): restrict task environment controls and app scopes

* fix(security): preserve legacy scopes and add read-only access

* feat(security): add read-only scopes for remaining resources

* fix(security): reject apps scope grants in app API

* fix(security): protect system app and task file boundaries

* fix: block case-variant secret paths and task runner env overrides

2026-11-03 23:04:43 +08:00

..

app.ts

feat: add client IP diagnostics and blocking

2026-08-16 13:57:33 +08:00

bootAfter.ts

定时任务支持 @once 和 @boot 任务

2025-02-20 02:18:59 +08:00

db.ts

fix: 修复任务生命周期与调度就绪，优化执行和构建开销 (#3069)

2026-09-13 00:32:41 +08:00

depInjector.ts

添加订阅管理前端

2022-05-08 09:41:06 +08:00

deps.ts

feat(cli): cover OpenAPI with a remote npm CLI and internal panel tools (#3074)

2026-09-25 23:24:41 +08:00

express.ts

fix(security): restrict task environment controls and app scopes (#3121)

2026-11-03 23:04:43 +08:00

httpApplication.ts

feat: ship verified platform upgrades with channel bundle releases

2026-10-18 22:19:49 +08:00

initData.ts

fix(security): restrict task environment controls and app scopes (#3121)

2026-11-03 23:04:43 +08:00

initFile.ts

修复添加任务有可能失败

2026-07-01 00:37:42 +08:00

initTask.ts

fix: synchronize runtime locales and harden online updates

2026-10-17 07:07:09 +08:00

logger.ts

修改服务启动逻辑

2025-05-07 09:30:00 +08:00

server.ts

修复添加任务有可能失败

2026-07-01 00:37:42 +08:00

sock.ts

perf: reduce resident dependencies and duplicate WebSocket authentication (#3071)

2026-09-18 20:22:18 +08:00