7 Commits

Author	SHA1	Message	Date
ryan	f6f8c25930	fix(router): restrict CORS origin reflection to allowed hosts (AUTH-ROUTE-5) ... - Extract isOriginAllowed helper to match Origin against server_address configurations - Ensure arbitrary origins are not reflected and credentials are not allowed when server_address is unconfigured or mismatched - Trim trailing slashes from allowed origins configuration for robust matching - Add TestCORSMiddleware to cover all CORS matching and rejection scenarios	2026-06-13 10:23:20 +08:00
ryan	d05acd804f	精简	2026-06-10 11:33:33 +08:00
ryan	e06f76436e	refactor: extract magic numbers to named constants for mnd lint compliance	2026-06-09 13:44:29 +08:00
ryan	85f91b1ed7	更新 license .github	2026-06-08 20:38:17 +08:00
ryan	e3ef6c9d27	修改路径	2026-06-08 20:38:17 +08:00
ryan	62bd5d09d4	移除 risk	2026-06-08 20:37:57 +08:00
ryan	8a782525de	压缩历史至 95081aff	2026-06-08 20:34:27 +08:00