Your Name
aa65f10c52
Audit docs:
- docs/reports/audit-phase-2{a-j}-line-walk.md: per-file line walk findings
- docs/reports/audit-phase-2-findings-matrix.md: 63 findings (52 fixed, 3 partial, 7 accepted)
- docs/reports/2026-05-23-full-audit-report.md: full audit consolidation
- docs/reports/audit-full-vs-phase2-reconciliation.md: cross-reference
- docs/reports/audit-phase-2-walk-closure.md: closure sign-off
Project docs:
- docs/project/phase-2-audit-remediation.md: SSOT for all fixes
- docs/project/alert-push-policy.md: dashboard alert design decisions
- docs/project/production-verification-checklist.md: first-deploy checklist
- docs/project/script-execution.md: script platform design
- docs/project/wsl-integration-test.md: WSL code-only verification guide
- docs/project/line-walk-audit-standard.md: audit methodology
- docs/project/mysql-mcp-setup.md: MCP config guide
Changelogs: 18 entries (2026-05-22 to 2026-05-23)
Project memory: CLAUDE.md, AGENTS.md updated to reflect current state
Deploy: nginx_https.conf template updated
Co-authored-by: Cursor <cursoragent@cursor.com>
802 B
802 B
前端 CDN 自托管（F2e-06）
日期: 2026-05-22
变更
- 新增
web/app/vendor/：Tailwind Browser 4.0.6、Alpine 3.14.8、xterm 5.3.0、qrious 4.0.2 等固定版本。 - 新增
scripts/sync_frontend_vendor.py：下载 vendor 并批量将 16 个 HTML 的 CDN URL 替换为/app/vendor/*。 web/app/vendor/manifest.json：记录版本、源 URL、sha384完整性（供日后 Subresource Integrity 或审计）。
升级 vendor
# 1. 修改 scripts/sync_frontend_vendor.py 中 VENDOR_MANIFEST 版本
# 2. 执行
python scripts/sync_frontend_vendor.py
# 3. 提交 vendor/ + HTML + manifest.json
验证
pytest tests/test_security_unit.py::test_html_pages_do_not_load_external_cdn -q
浏览器 Network 面板应无 cdn.jsdelivr.net 请求。