erio f7efa15ec7 fix(csp): auto-inject Stripe domains into CSP regardless of config source ...

enhanceCSPPolicy now adds https://*.stripe.com to script-src and
frame-src when not already present, ensuring Stripe.js loads even
when the CSP policy comes from database settings.

2026-04-07 15:29:15 +08:00

..

middleware

fix(csp): auto-inject Stripe domains into CSP regardless of config source

2026-04-07 15:29:15 +08:00

routes

fix(payment): webhook GET support, Stripe as single method, QR page improvements

2026-04-07 10:38:21 +08:00

api_contract_test.go

Merge tag 'v0.1.108' into release/custom-0.1.108

2026-04-05 23:11:04 +08:00

http.go

feat(backend): 提交后端审计修复与配套测试改动

2026-02-14 11:23:10 +08:00

router.go

Merge feature/payment into release/custom-0.1.108

2026-04-06 00:53:57 +08:00