Files
Nexus/docs/archive/audits/2026-06-04-phase2/audit-phase2-2026-06-04-waveP2-8.md
T
2026-07-08 22:31:31 +08:00

1.5 KiB
Raw Blame History

Phase 2 深审 — Wave P2-8(前端页 5/14

日期: 2026-06-04
范围: Credentials / Schedules / Retries / Commands / Scripts
标准: 8 步逐行

登记

# 文件 行数 N Read 范围
1 frontend/src/pages/CredentialsPage.vue 400 1400 全文
2 frontend/src/pages/SchedulesPage.vue 295 1295 全文
3 frontend/src/pages/RetriesPage.vue 191 1191 全文
4 frontend/src/pages/CommandsPage.vue 168 1168 全文
5 frontend/src/pages/ScriptsPage.vue 535 1535 全文

Closure 表

H 文件:行号 判定 理由
H-CredList CredentialsPage:253-255 SAFE GET 列表无密码明文
H-CredPost CredentialsPage:323-327 SAFE encrypted_pw 仅 POST/PUT
H-CredEdit CredentialsPage:306,340,357 SAFE 编辑留空不修改
H-SSH CredentialsPage:346-347 SAFE 私钥仅提交时传输
H-Cron SchedulesPage:177 SAFE cron 正则校验
H-Sched SchedulesPage:173-180 SAFE 路径/服务器必填
H-Retry RetriesPage:146 SAFE retry POST JWT
H-CmdView CommandsPage:139-153 SAFE 只读 command-logs/sessions
H-ScriptExec ScriptsPage:415-419,463-467 SAFE exec 走后端 JWT
H-Quick ScriptsPage:459-467 RISK 临时命令;后端 check_dangerous
H-Poll ScriptsPage:527-528 SAFE onUnmounted stopPolling

len(H)=11, Closure=11

FINDING

无 P0/P1 新 FINDING。