WuYongJie/CaiWuXiTong
1
0
Fork 0
Code Issues Pull Requests 2 Packages Projects Releases Wiki Activity

修复 Livewire 请求导致本机网址被防火墙封禁 #194

Merged
chenxi merged 1 commits from fix/chenxi-livewire-firewall-false-positive into main 2026-09-16 11:16:37 +08:00
Conversation 0 Commits 1 Files Changed 2 +47 -1
chenxi commented 2026-09-16 11:16:22 +08:00
Collaborator
Copy Link

原因

Livewire 的签名 snapshot 包含大量序列化 JSON，被旧 XSS 正则误判；同一 Docker 网关 IP 连续命中后会封禁 30 分钟，导致所有本地页面返回 firewall::responses.block.message。

修改

  • XSS 扫描忽略 Livewire 自带且有签名校验的 snapshot 字段
  • Livewire 的用户 updates 和普通 POST 字段仍继续接受 XSS 扫描
  • 增加回归测试

验证

  • LivewireXssExclusionTest：2 passed，3 assertions
  • TooManyEmailsSentTest：2 passed，6 assertions
  • 浏览器已恢复显示正常登录页
  • 不涉及数据库结构、权限或业务数据写入
## 原因 Livewire 的签名 snapshot 包含大量序列化 JSON，被旧 XSS 正则误判；同一 Docker 网关 IP 连续命中后会封禁 30 分钟，导致所有本地页面返回 firewall::responses.block.message。 ## 修改 - XSS 扫描忽略 Livewire 自带且有签名校验的 snapshot 字段 - Livewire 的用户 updates 和普通 POST 字段仍继续接受 XSS 扫描 - 增加回归测试 ## 验证 - LivewireXssExclusionTest：2 passed，3 assertions - TooManyEmailsSentTest：2 passed，6 assertions - 浏览器已恢复显示正常登录页 - 不涉及数据库结构、权限或业务数据写入
chenxi added 1 commit 2026-09-16 11:16:22 +08:00
chenxi merged commit a3cd9f4d03 into main 2026-09-16 11:16:37 +08:00
Sign in to join this conversation.
Reviewers
No Reviewers
Labels
No items
No Label
Milestone
No items
No Milestone
Projects
Clear projects
No project
Assignees
Clear assignees
aaron chenxi DoDo jj404877757 limeng qiuxiang renshen shanshi sumu wangshu yueyang yutu zhoushengchen WuYongJie
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: WuYongJie/CaiWuXiTong#194
No description provided.
Delete Branch "fix/chenxi-livewire-firewall-false-positive"

Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?