Your Name
|
2eba3d8b5e
|
fix: separate admin api rate limiting
|
2026-05-28 10:08:30 +08:00 |
|
Your Name
|
d58b706799
|
security: implement Phase 1 & partial Phase 2 improvements
Lint / build (20) (push) Has been cancelled
- Remove hardcoded admin password, use env var or auto-generate
- Fix trustHost to be conditional (Vercel-only by default)
- Add HTTP security headers (CSP, X-Frame-Options, HSTS)
- Create middleware.ts to activate existing rate limiting
- Implement structured logging system
- Rewrite error handling in ai-cad service
- Update security documentation
|
2026-05-05 22:49:57 +08:00 |
|
Your Name
|
326707064c
|
fix(proxy): isolate image-proxy rate limiter
Lint / build (20) (push) Has been cancelled
Playwright Tests / test (push) Has been cancelled
|
2026-03-05 16:18:58 +08:00 |
|
Your Name
|
60349a3bb0
|
fix(upload): isolate rate limit and add 429 retry backoff
Lint / build (20) (push) Has been cancelled
Playwright Tests / test (push) Has been cancelled
|
2026-03-05 16:14:38 +08:00 |
|
Your Name
|
ac76f31878
|
feat(agent): support dedicated coding model id and detail pipeline hardening
Lint / build (20) (push) Has been cancelled
Playwright Tests / test (push) Has been cancelled
|
2026-02-22 18:19:31 +08:00 |
|
Your Name
|
071958bb15
|
fix: improve detail planning and realtime canvas behavior
Lint / build (20) (push) Has been cancelled
Playwright Tests / test (push) Has been cancelled
|
2026-02-22 04:52:12 +08:00 |
|
Your Name
|
f0ede6f0c9
|
修复画布Agent误澄清与输入标签污染并优化chat限流
Lint / build (20) (push) Has been cancelled
Playwright Tests / test (push) Has been cancelled
|
2026-02-14 10:35:11 +08:00 |
|
Your Name
|
a9236cdc3b
|
fix: 修复正常网页访问被误判为可疑请求的问题
Lint / build (20) (push) Has been cancelled
Playwright Tests / test (push) Has been cancelled
- 排除正常的应用路径（/api/admin/, /api/, /chat/, /gallery/, /settings/等）
- 避免正常的网页访问被标记为可疑请求
- 只对真正可疑的路径（如/.env, /wp-admin等）进行标记
|
2025-12-29 16:28:17 +08:00 |
|
Your Name
|
e9ceedb3bf
|
feat: 添加图片变清晰功能
- 创建 /api/enhance 路由，实现图片变清晰API集成
- 在图片标注组件中添加变清晰按钮（Sparkles图标）
- 在相册页面添加变清晰按钮
- 系统设置：将抠图设置改名为本地AI设置，添加变清晰API配置
- 支持同步和异步两种模式
- 自动上传到S3存储桶并保存到数据库
- 在相册和出图记录中显示处理后的图片
|
2025-12-29 00:33:12 +08:00 |
|
Your Name
|
a8abed6b5b
|
feat: 添加多层安全防护机制
Lint / build (20) (push) Has been cancelled
Playwright Tests / test (push) Has been cancelled
- 添加速率限制中间件，防止API滥用和DDoS攻击
- 添加可疑请求检测，基于行为模式识别攻击
- 添加输入清理和验证，防止命令注入和XSS攻击
- 更新middleware.ts，集成所有安全功能
- 添加fail2ban安装脚本，防止SSH暴力破解
- 不依赖IP黑名单，适用于所有攻击者
安全功能：
- API速率限制：每分钟100次请求
- 认证速率限制：每分钟5次请求
- 自动检测可疑请求模式
- 输入清理和验证
- 详细的安全日志记录
|
2025-12-28 22:45:13 +08:00 |
|