Repository navigation

fix: 修复权限边界、富文本安全与多端异常处理缺陷 - #136

Merged

insistence merged 21 commits into

masterfrom

fix-bug

Oct 21, 2026

Merged

fix: 修复权限边界、富文本安全与多端异常处理缺陷#136
insistence merged 21 commits into
masterfrom
fix-bug

Commits on Oct 21, 2026
- fix: 关闭全部 API 文档时禁用公开 Schema
  insistence
  committed
  7f81f1c
- fix: 单独启用文档时提供代理 OpenAPI Schema
  insistence
  committed
  a71134d
- fix: CLI 生产保护使用实际加载的应用环境
   insistence
  committed
  2e2f430
- fix: 无有效角色时默认拒绝数据访问
   insistence
  committed
  d1b46ba
- fix: 清洗公告富文本并保护历史公告展示
   insistence
  committed
  8c8de2d
- fix: 未知异常响应隐藏内部信息并提供错误标识
   insistence
  committed
  099505c
- fix: 操作日志保留认证与协议异常的响应语义
   insistence
  committed
  6e04800
- fix: 移动请求与上传优先校验 HTTP 错误状态
   insistence
  committed
  faed7fb
- fix: 上传回调解析失败和平台错误时可靠结束 Promise
  insistence
  committed
  a88cad3
- fix: 上传会话失效后跳转到已注册的登录页面
   insistence
  committed
  b44fe77
- fix: 远端退出失败时仍清理移动端本地会话
   insistence
  committed
  3be52bc
- fix: 请求与上传共用移动端会话失效处理
   insistence
  committed
  c9d7fb4
- fix: CLI 保留任务执行编号与调度同步结果
   insistence
  committed
  754c0e3
- fix: 统一移动 WebView 协议校验并避免重复解码
   insistence
  committed
  ab4219f
- refactor: 将富文本清洗封装为安全工具类
   insistence
  committed
  61bf610
- fix: 限制用户编辑接口可写字段以保护密码重置权限
   insistence
  committed
  ed6c85b
- fix: 部门新增和迁移校验目标父部门数据权限
   insistence
  committed
  6e0e162
- fix: 部门编辑拒绝循环与无效父级并维护祖级关系
   insistence
  committed
  53838bf
- fix: 菜单编辑校验父级链并拒绝循环关系
   insistence
  committed
  0d60235
- fix: 远端退出失败时清理 Web 和 React 移动端会话
   insistence
  committed
  0fc6000
- test: 修正 OAuth 控制器异常响应测试链路
   insistence
  committed
  8dc6fb2

Commits

Commits on Oct 21, 2026