docs(audit): 补全全局浮动浏览器 Closure 与文件清单

Co-authored-by: Cursor <cursoragent@cursor.com>
This commit is contained in:
Nexus Agent
2026-06-11 20:11:21 +08:00
parent 8356425814
commit a94d340ec0
@@ -6,8 +6,13 @@
|------|------|
| `server/utils/browser_ui_state.py` | URL 校验、visit 上限 |
| `server/api/browser.py` | `/api/browser/state` |
| `server/main.py` | 注册 browser 路由 |
| `frontend/src/composables/useGlobalBrowser.ts` | 全局状态 |
| `frontend/src/components/GlobalBrowserPanel.vue` | 浮动面板 |
| `frontend/src/pages/BrowserPage.vue` | 打开全局窗并返回 |
| `frontend/src/App.vue` | 挂载 GlobalBrowserPanel |
| `frontend/src/pages/ServersPage.vue` | 站点按钮 |
| `frontend/src/composables/useEmbeddedBrowser.ts` | 删除(由 global 替代) |
| `tests/test_browser_ui_state.py` | 单测 |
## Step 3 规则扫描
@@ -19,9 +24,18 @@
| H3 | 按管理员隔离 | PASS — admin_ui_preferences |
| H4 | iframe sandbox | PASS |
## Closure
| H | 判定 | 依据 |
|---|------|------|
| H1 | PASS | 纯 iframe,无 proxy |
| H2 | PASS | browser_ui_state._is_safe_url |
| H3 | PASS | AdminUiPreference per admin |
| H4 | PASS | GlobalBrowserPanel sandbox attr |
## DoD
- [x] pytest
- [x] pytest test_browser_ui_state.py
- [x] type-check
- [x] changelog