7 Commits

Author SHA1 Message Date
Your Name
2eba3d8b5e fix: separate admin api rate limiting 2026-05-28 10:08:30 +08:00
Your Name
326707064c fix(proxy): isolate image-proxy rate limiter
Some checks failed
Lint / build (20) (push) Has been cancelled
Playwright Tests / test (push) Has been cancelled
2026-03-05 16:18:58 +08:00
Your Name
60349a3bb0 fix(upload): isolate rate limit and add 429 retry backoff
Some checks failed
Lint / build (20) (push) Has been cancelled
Playwright Tests / test (push) Has been cancelled
2026-03-05 16:14:38 +08:00
Your Name
ac76f31878 feat(agent): support dedicated coding model id and detail pipeline hardening
Some checks failed
Lint / build (20) (push) Has been cancelled
Playwright Tests / test (push) Has been cancelled
2026-02-22 18:19:31 +08:00
Your Name
071958bb15 fix: improve detail planning and realtime canvas behavior
Some checks failed
Lint / build (20) (push) Has been cancelled
Playwright Tests / test (push) Has been cancelled
2026-02-22 04:52:12 +08:00
Your Name
f0ede6f0c9 修复画布Agent误澄清与输入标签污染并优化chat限流
Some checks failed
Lint / build (20) (push) Has been cancelled
Playwright Tests / test (push) Has been cancelled
2026-02-14 10:35:11 +08:00
Your Name
a8abed6b5b feat: 添加多层安全防护机制
Some checks failed
Lint / build (20) (push) Has been cancelled
Playwright Tests / test (push) Has been cancelled
- 添加速率限制中间件,防止API滥用和DDoS攻击
- 添加可疑请求检测,基于行为模式识别攻击
- 添加输入清理和验证,防止命令注入和XSS攻击
- 更新middleware.ts,集成所有安全功能
- 添加fail2ban安装脚本,防止SSH暴力破解
- 不依赖IP黑名单,适用于所有攻击者

安全功能:
- API速率限制:每分钟100次请求
- 认证速率限制:每分钟5次请求
- 自动检测可疑请求模式
- 输入清理和验证
- 详细的安全日志记录
2025-12-28 22:45:13 +08:00