From 288c5d7152bb4e4e531e3c360fa2a62d520bf2c6 Mon Sep 17 00:00:00 2001 From: sagitchu Date: Tue, 21 Apr 2026 09:20:04 +0800 Subject: [PATCH] fix: restore SSRF/security protections after glass UI cherry-pick --- go-backend/internal/http/handler/handler.go | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/go-backend/internal/http/handler/handler.go b/go-backend/internal/http/handler/handler.go index bcdf169..c9262d7 100644 --- a/go-backend/internal/http/handler/handler.go +++ b/go-backend/internal/http/handler/handler.go @@ -976,7 +976,7 @@ func (h *Handler) updateSingleConfig(w http.ResponseWriter, r *http.Request) { return } - if value == "" && name != "app_logo" && name != "app_favicon" && name != "app_bg_image" { + if value == "" && name != "app_logo" && name != "app_favicon" { response.WriteJSON(w, response.ErrDefault("配置值不能为空")) return }