erio 4e96a6faec fix: address audit findings for notify, websearch and security ...

- Fix GetByKeyForAuth missing user.FieldEmail and user.FieldUsername (notifications sent to empty address)
- Guard against empty email in collectBalanceNotifyRecipients
- Remove non-atomic TotalRecharged read-modify-write in admin balance adjustment
- HTML-escape userName/siteName/accountName in notification email templates
- Fix timer leak in ProfileBalanceNotifyCard (add onUnmounted cleanup)
- Add warning log on websearch proxy URL resolution failure

2026-04-14 09:25:49 +08:00

..

public

First commit

2025-12-18 13:50:39 +08:00

src

fix: address audit findings for notify, websearch and security

2026-04-14 09:25:49 +08:00

.eslintignore

chore: 添加ESLint忽略配置

2026-01-12 11:44:34 +08:00

.eslintrc.cjs

feat(安全): 添加安全开关并完善测试流程

2026-01-05 13:54:43 +08:00

.npmrc

chore(deps): 将包管理器从 npm 迁移到 pnpm

2026-01-05 10:06:31 +08:00

audit.json

fix(安全): 修复依赖漏洞并强化安全扫描

2026-01-06 11:36:38 +08:00

index.html

chore(frontend): 更新项目配置和依赖

2025-12-26 00:10:44 -08:00

package.json

fix(deps): upgrade axios to 1.15.0 to fix GHSA-fvcv-3m26-pcqx

2026-04-11 16:46:46 +08:00

pnpm-lock.yaml

fix(deps): upgrade axios to 1.15.0 to fix GHSA-fvcv-3m26-pcqx

2026-04-11 16:46:46 +08:00

postcss.config.js

chore(frontend): 更新项目配置和依赖

2025-12-26 00:10:44 -08:00

tailwind.config.js

perf(前端): 移除 Google Fonts 改用系统字体栈

2026-01-16 19:49:33 +08:00

tsconfig.json

merge upstream main

2026-02-02 22:13:50 +08:00

tsconfig.node.json

First commit

2025-12-18 13:50:39 +08:00

vite.config.ts

feat: 新增apikey的usage查询页面

2026-03-05 10:45:51 +08:00

vitest.config.ts

feat(sync): full code sync from release

2026-02-28 15:01:20 +08:00