long-agent 61692e4c1a fix(security): /uploads 目录路径遍历防护 ...

- 替换 Static 为受控文件服务 handler (serveUploads)
- 添加 filepath.Clean 路径清理 + .. 检测
- 使用 Abs + HasPrefix 限制访问范围在上传目录内
- 添加安全响应头（CSP default-src 'none', X-Content-Type-Options nosniff）

2026-05-08 12:28:03 +08:00

..

providers

feat: backend core - auth, user, role, permission, device, webhook, monitoring, cache, repository, service, middleware, API handlers

2026-04-02 11:19:50 +08:00

cas_test.go

test: add comprehensive test coverage and improve code quality

2026-04-17 20:43:50 +08:00

cas.go

fix: 生产安全修复 + Go SDK + CAS SSO框架

2026-04-03 17:38:31 +08:00

errors.go

feat: backend core - auth, user, role, permission, device, webhook, monitoring, cache, repository, service, middleware, API handlers

2026-04-02 11:19:50 +08:00

jwt_closure_test.go

fix: P2 security and correctness issues

2026-04-18 20:48:11 +08:00

jwt_password_test.go

fix: P0/P1 security and quality fixes

2026-04-18 15:33:12 +08:00

jwt.go

fix: P2 security and correctness issues

2026-04-18 20:48:11 +08:00

oauth_config_test.go

test: add comprehensive test coverage and improve code quality

2026-04-17 20:43:50 +08:00

oauth_config.go

feat: backend core - auth, user, role, permission, device, webhook, monitoring, cache, repository, service, middleware, API handlers

2026-04-02 11:19:50 +08:00

oauth_test.go

fix(security): /uploads 目录路径遍历防护

2026-05-08 12:28:03 +08:00

oauth_utils_test.go

test: add comprehensive test coverage and improve code quality

2026-04-17 20:43:50 +08:00

oauth_utils.go

feat: backend core - auth, user, role, permission, device, webhook, monitoring, cache, repository, service, middleware, API handlers

2026-04-02 11:19:50 +08:00

oauth.go

fix(security): /uploads 目录路径遍历防护

2026-05-08 12:28:03 +08:00

password_test.go

test: add comprehensive test coverage and improve code quality

2026-04-17 20:43:50 +08:00

password.go

security(auth): raise Argon2id calibration minimums to OWASP thresholds (SEC-ARGON2)

2026-05-08 10:24:10 +08:00

sso_test.go

test: add comprehensive test coverage and improve code quality

2026-04-17 20:43:50 +08:00

sso.go

test: add comprehensive test coverage and improve code quality

2026-04-17 20:43:50 +08:00

state_test.go

test: add comprehensive test coverage and improve code quality

2026-04-17 20:43:50 +08:00

state.go

test: add comprehensive test coverage and improve code quality

2026-04-17 20:43:50 +08:00

totp_test.go

fix(n+1): 批量查询替代循环单查

2026-05-08 08:05:26 +08:00

totp.go

fix(n+1): 批量查询替代循环单查

2026-05-08 08:05:26 +08:00