Files
Nexus/docs/reports/audit-frontend-14p-2026-06-04-closure.md
2026-07-08 22:31:31 +08:00

51 lines
1.7 KiB
Markdown
Raw Permalink Blame History

This file contains ambiguous Unicode characters
This file contains Unicode characters that might be confused with other characters. If you think that this is intentional, you can safely ignore this warning. Use the Escape button to reveal them.
# 前端 14 页分批深审 — 总 Closure
**日期**: 2026-06-04
**范围**: `frontend/src/pages/*Page.vue` 全部 14 页
**总行数**: 4112
## 批次索引
| 批次 | 页面 | 报告 | H |
|------|------|------|---|
| 1/3 | Dashboard, Servers, Terminal, Files, Push | [batch1](audit-frontend-14p-2026-06-04-batch1.md) | 14 |
| 2/3 | Scripts, Credentials, Schedules, Retries, Commands | [batch2](audit-frontend-14p-2026-06-04-batch2.md) | 15 |
| 3/3 | Alerts, Audit, Settings, Login | [batch3](audit-frontend-14p-2026-06-04-batch3.md) | 14 |
| **合计** | **14 页** | | **43** |
## 跨页 RISK(已接受,不重复开 FINDING
| 项 | 页面 | 文档 |
|----|------|------|
| WS query JWT | Terminal, Pushcomposable | risk-acceptance-single-operator.md |
| 临时命令 exec | ScriptsPage | 后端 check_dangerous_command |
| bing-wallpaper 公开 GET | Login, Dashboard | 后端只读缓存 |
## 编排页说明
| 页 | 行数 | 逻辑位置 |
|----|------|----------|
| FilesPage | 38 | `useFilesPage` + D5 composables |
| PushPage | 106 | `usePushPage` + D4 composables |
| TerminalPage | 408 | 页内 UI + `useTerminalSessions` |
页壳已全文 ReadSink 在 composable 层另有 D4/D5/P2 深审。
## DoD
- [x] 14 页每页 1N 全文 Read
- [x] 3 批 8 步报告 + 本 closure
- [x] 0 P0/P1 新 FINDING
- [x] Playwright E2E 15 路由已绿(L4
## 增量审计(2026-06-06
凭据轮询 / pending servers + 预设 `username`[2026-06-06-frontend-14p-contract-audit.md](2026-06-06-frontend-14p-contract-audit.md) — 契约 **PASS**0 新 P0/P1。
## 验证
```bash
bash scripts/local_verify.sh
cd frontend && NEXUS_E2E_BASE=http://127.0.0.1:8600 npm run test:e2e
```