opensource/sub2api
3
0
Fork 0
mirror of https://github.com/Wei-Shaw/sub2api.git synced 2026-09-24 16:05:44 +08:00
Code Issues Packages Projects Releases Wiki Activity

Merge upstream v0.1.112

Browse Source 
Merge upstream v0.1.112 into release/custom-0.1.112.
Resolved conflicts preserving our customizations (allow_user_refund,
balance/quota notify, web search emulation) while adopting upstream
improvements (BySortOrder for plans, CSS sidebar collapse animation,
mobile lazy-load optimization, Anthropic empty output fix).
This commit is contained in:
erio
2026-04-14 02:00:02 +08:00
parent 63315cb7db f9f57e9505
commit 54e55e8da0
35 changed files with 1002 additions and 81 deletions
Download Patch File Download Diff File Expand all files Collapse all files
.github/audit-exceptions.yml
+7
View File
@@ -28,3 +28,10 @@ exceptions:
mitigation: "No user-controlled template strings; plan to migrate to native JS alternatives"
expires_on: "2026-07-02"
owner: "security@your-domain"
- package: axios
advisory: "GHSA-3p68-rc4w-qgx5"
severity: critical
reason: "NO_PROXY bypass not exploitable; all API calls go to known endpoints via server-side proxy"
mitigation: "Proxy configuration not user-controlled; upgrade when axios releases fix"
expires_on: "2026-07-10"
owner: "security@your-domain"