docs(audit): 补全全局浮动浏览器 Closure 与文件清单
Co-authored-by: Cursor <cursoragent@cursor.com>
This commit is contained in:
@@ -6,8 +6,13 @@
|
||||
|------|------|
|
||||
| `server/utils/browser_ui_state.py` | URL 校验、visit 上限 |
|
||||
| `server/api/browser.py` | `/api/browser/state` |
|
||||
| `server/main.py` | 注册 browser 路由 |
|
||||
| `frontend/src/composables/useGlobalBrowser.ts` | 全局状态 |
|
||||
| `frontend/src/components/GlobalBrowserPanel.vue` | 浮动面板 |
|
||||
| `frontend/src/pages/BrowserPage.vue` | 打开全局窗并返回 |
|
||||
| `frontend/src/App.vue` | 挂载 GlobalBrowserPanel |
|
||||
| `frontend/src/pages/ServersPage.vue` | 站点按钮 |
|
||||
| `frontend/src/composables/useEmbeddedBrowser.ts` | 删除(由 global 替代) |
|
||||
| `tests/test_browser_ui_state.py` | 单测 |
|
||||
|
||||
## Step 3 规则扫描
|
||||
@@ -19,9 +24,18 @@
|
||||
| H3 | 按管理员隔离 | PASS — admin_ui_preferences |
|
||||
| H4 | iframe sandbox | PASS |
|
||||
|
||||
## Closure
|
||||
|
||||
| H | 判定 | 依据 |
|
||||
|---|------|------|
|
||||
| H1 | PASS | 纯 iframe,无 proxy |
|
||||
| H2 | PASS | browser_ui_state._is_safe_url |
|
||||
| H3 | PASS | AdminUiPreference per admin |
|
||||
| H4 | PASS | GlobalBrowserPanel sandbox attr |
|
||||
|
||||
## DoD
|
||||
|
||||
- [x] pytest
|
||||
- [x] pytest test_browser_ui_state.py
|
||||
- [x] type-check
|
||||
- [x] changelog
|
||||
|
||||
|
||||
Reference in New Issue
Block a user