xiaoxia-saas

Author	SHA1	Message	Date
xiaoxia	fe2ab121e7	fix(security): 后端安全技术债务第二轮（P1+P2+P2） (#332 ) CI/CD Pipeline / Validate Code Quality And Tests (push) Failing after 40s Details CI/CD Pipeline / Unit Tests (push) Failing after 1m42s Details CI/CD Pipeline / Integration Tests (push) Successful in 1m20s Details CI/CD Pipeline / Frontend Lint (push) Has been cancelled Details CI/CD Pipeline / Build Staging API Image (push) Has been cancelled Details CI/CD Pipeline / Build Staging Worker Image (push) Has been cancelled Details CI/CD Pipeline / Build Staging Web Image (push) Has been cancelled Details CI/CD Pipeline / Deploy Staging (Watchtower auto-deploy) (push) Has been cancelled Details CI/CD Pipeline / Staging E2E Tests (push) Has been cancelled Details CI/CD Pipeline / Staging API Integration Tests (push) Has been cancelled Details CI/CD Pipeline / Build Production API Image (push) Has been cancelled Details CI/CD Pipeline / Build Production Worker Image (push) Has been cancelled Details CI/CD Pipeline / Build Production Web Image (push) Has been cancelled Details CI/CD Pipeline / Deploy Production (push) Has been cancelled Details CI/CD Pipeline / Production Browser E2E (push) Has been cancelled Details fix(security): 后端安全技术债务第二轮（P1+P2+P2） - audio_merger裸subprocess下沉 + ffmpeg_utils架构下沉到packages/shared - _verify_url_accessible重定向每跳SSRF校验 - url_security下载文件魔数校验 - 新增33个单测	2026-07-15 00:12:04 +08:00
用户CI Test	ab413413b7	perf(P3): 三项代码审查优化 — strict模式/session合并/HEAD重试 CI/CD Pipeline / Frontend Lint (pull_request) Successful in 1m34s Details CI/CD Pipeline / Validate Code Quality And Tests (pull_request) Successful in 1m47s Details CI/CD Pipeline / Build & Push Staging (Watchtower auto-deploy) (pull_request) Has been skipped Details CI/CD Pipeline / Build Production Runtime Images (pull_request) Has been skipped Details CI/CD Pipeline / Staging E2E Tests (pull_request) Has been skipped Details CI/CD Pipeline / Staging API Integration Tests (pull_request) Has been skipped Details CI/CD Pipeline / Deploy Production (pull_request) Has been skipped Details CI/CD Pipeline / Production Browser E2E (pull_request) Has been skipped Details P3-1: _download_library_assets 增加 strict 参数（默认 true） - strict 模式：任意素材下载失败立即抛 RuntimeError - non-strict 模式：跳过失败素材返回成功列表，全部失败仍抛异常 - 归属校验合并到同一 DB session（P3-2），减少连接开销 P3-2: 移除 generate_video 中独立的 _validate_asset_ids_ownership 调用 - 归属校验已内联到 _download_library_assets 同一 session 中 P3-3: _verify_url_accessible 增加 HEAD 重试（默认 2 次，间隔 1s） - 防止 OSS 抖动导致误报不可访问新增 15 个单元测试覆盖三项优化更新 1 个旧测试适配新 strict 模式错误信息 Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>	2026-07-10 07:42:39 +08:00

2 Commits