ryan f6f8c25930 fix(router): restrict CORS origin reflection to allowed hosts (AUTH-ROUTE-5) ...

- Extract isOriginAllowed helper to match Origin against server_address configurations
- Ensure arbitrary origins are not reflected and credentials are not allowed when server_address is unconfigured or mismatched
- Trim trailing slashes from allowed origins configuration for robust matching
- Add TestCORSMiddleware to cover all CORS matching and rejection scenarios

2026-06-13 10:23:20 +08:00

..

apps

fix(upload): restrict cross-user private file access (UPLOAD-1)

2026-06-13 10:13:41 +08:00

buildinfo

系统控制台完成更新

2026-06-12 14:12:03 +08:00

cmd

系统控制台完成更新

2026-06-12 14:12:03 +08:00

common

精简

2026-06-10 11:33:33 +08:00

config

优化任务管理

2026-06-10 19:36:35 +08:00

db

fix(upload): restrict cross-user private file access (UPLOAD-1)

2026-06-13 10:13:41 +08:00

diskcache

fix: 修复任务执行记录列表按任务类型和状态过滤失效的 Bug 并更新 Swagger

2026-06-11 20:14:02 +08:00

listener

裁剪

2026-06-08 20:34:28 +08:00

logger

精简

2026-06-10 11:33:33 +08:00

model

fix(upload): restrict cross-user private file access (UPLOAD-1)

2026-06-13 10:13:41 +08:00

otel_trace

精简

2026-06-10 11:33:33 +08:00

router

fix(router): restrict CORS origin reflection to allowed hosts (AUTH-ROUTE-5)

2026-06-13 10:23:20 +08:00

service

裁剪

2026-06-08 20:34:28 +08:00

storage

质量优化

2026-06-10 13:50:58 +08:00

task

修复退出异常问题

2026-06-12 14:32:27 +08:00

testhelper

feat(valkey): migrate redis to valkey and fix updater custom prefix selection

2026-06-12 15:44:49 +08:00

util

邮箱注册要求

2026-06-12 10:55:24 +08:00