Your Name 8530f0e0d5 安全补强: 6项P0/P1漏洞修复 ...

P0-1: PHP配置注入防护 — install.py添加_escape_php_string()转义单引号和反斜杠
P0-2: WebSocket JWT校验 — _verify_ws_token()要求exp+sub字段
P1-1: 删除SHA256密码fallback — auth_service.py和auth.py直接import bcrypt
P1-3: LIKE通配符转义 — search.py添加_escape_like()并对所有ilike()加escape参数
P1-2: 安全响应头中间件 — main.py添加SecurityHeadersMiddleware注入4个安全头
P0-3: Refresh Token重用检测 — Admin模型添加token_version字段，token格式改为token:admin_id:version

Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>

2026-05-22 22:16:50 +08:00

..

models

安全补强: 6项P0/P1漏洞修复

2026-05-22 22:16:50 +08:00

repositories

feat: Nexus 6.0 6-step implementation (Step 0-5)

2026-05-21 22:11:38 +08:00

__init__.py

refactor: 仓库结构扁平化 + PHP前端合并到Nexus仓库

2026-05-20 17:24:21 +08:00