lunanting/ai-chatbot
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
2,575 Commits 28 Branches 1 Tag
Commit Graph

2 Commits

Author SHA1 Message Date
Your Name
d58b706799 security: implement Phase 1 & partial Phase 2 improvements
Some checks failed
Lint / build (20) (push) Has been cancelled
Details 
- Remove hardcoded admin password, use env var or auto-generate
- Fix trustHost to be conditional (Vercel-only by default)
- Add HTTP security headers (CSP, X-Frame-Options, HSTS)
- Create middleware.ts to activate existing rate limiting
- Implement structured logging system
- Rewrite error handling in ai-cad service
- Update security documentation
 2026-05-05 22:49:57 +08:00
Your Name
a8abed6b5b feat: 添加多层安全防护机制
Some checks failed
Lint / build (20) (push) Has been cancelled
Details
Playwright Tests / test (push) Has been cancelled
Details 
- 添加速率限制中间件，防止API滥用和DDoS攻击
- 添加可疑请求检测，基于行为模式识别攻击
- 添加输入清理和验证，防止命令注入和XSS攻击
- 更新middleware.ts，集成所有安全功能
- 添加fail2ban安装脚本，防止SSH暴力破解
- 不依赖IP黑名单，适用于所有攻击者

安全功能：
- API速率限制：每分钟100次请求
- 认证速率限制：每分钟5次请求
- 自动检测可疑请求模式
- 输入清理和验证
- 详细的安全日志记录
 2025-12-28 22:45:13 +08:00