019201fb5c51dab6521bd2bcd252ed7a478e1cff
3 Commits
| Author | SHA1 | Message | Date | |
|---|---|---|---|---|
 AI Bot
|
019201fb5c |
test(wave128): url_security纯逻辑抽离+110单测
CI/CD Pipeline / Check if frontend-only change (pull_request) Successful in 18s
CI/CD Pipeline / Frontend Lint (pull_request) Successful in 58s
CI/CD Pipeline / Validate - Type Check (mypy) (pull_request) Successful in 1m27s
CI/CD Pipeline / Validate - Migration (alembic) (pull_request) Successful in 1m23s
CI/CD Pipeline / PR Build Web Image (pull_request) Successful in 26s
CI/CD Pipeline / PR Build Worker Image (pull_request) Successful in 16s
CI/CD Pipeline / Validate - Code Quality (pull_request) Failing after 2m1s
PR Automation / Auto Merge on CI Green + Approved (pull_request) Successful in 1m1s
Preview Deploy / Deploy Preview Environment (pull_request) Successful in 54s
CI/CD Pipeline / PR Build API Image (pull_request) Successful in 3m27s
AI Code Review / AI Code Review (pull_request) Successful in 2m15s
PR Automation / Auto Approve on CI Green (pull_request) Successful in 3m14s
CI/CD Pipeline / Integration Tests (pull_request) Successful in 3m32s
CI/CD Pipeline / Unit Tests (pull_request) Failing after 6m7s
CI/CD Pipeline / Staging E2E Tests (pull_request) Has been cancelled
CI/CD Pipeline / Staging API Integration Tests (pull_request) Has been cancelled
CI/CD Pipeline / Deploy Production (pull_request) Has been cancelled
CI/CD Pipeline / Production Browser E2E (pull_request) Has been cancelled
CI/CD Pipeline / ACR Image Cleanup (pull_request) Has been cancelled
CI/CD Pipeline / Canary Release to Production (pull_request) Has been cancelled
CI/CD Pipeline / Deploy Staging (Watchtower auto-deploy) (pull_request) Failing after 1221h16m7s
CI/CD Pipeline / Build Production Worker Image (pull_request) Failing after 1221h17m38s
CI/CD Pipeline / Build Production API Image (pull_request) Failing after 1221h17m42s
CI/CD Pipeline / Frontend Unit Tests (pull_request) Failing after 1221h17m44s
CI/CD Pipeline / Build Staging Worker Image (pull_request) Failing after 1223h6m35s
CI/CD Pipeline / Build Staging Web Image (pull_request) Failing after 1223h6m37s
CI/CD Pipeline / Build Staging API Image (pull_request) Failing after 1223h6m37s
CI/CD Pipeline / Build Production Web Image (pull_request) Failing after 1221h50m26s
- 新建 packages/domain/url_security.py：SSRF防护纯逻辑模块 - URL基础校验（scheme/port/hostname/internal/IP-SSRF/trusted-domain） - 魔数校验纯函数（接收bytes） - 常量、异常类、辅助函数 - packages/shared/url_security.py 改为薄包装 - 保留DNS解析、文件下载等有副作用逻辑 - 纯逻辑委托给domain层，完全向后兼容 - 110个单测全覆盖：常量/内部主机名/可信域名/SSRF IP/IP判断/URL校验/魔数校验 - 修复check_ssrf_ip检查顺序：link_local/unspecified放private前 |
||
 xiaoxia
|
fe2ab121e7 |
fix(security): 后端安全技术债务第二轮（P1+P2+P2） (#332)
CI/CD Pipeline / Validate Code Quality And Tests (push) Failing after 40s
CI/CD Pipeline / Unit Tests (push) Failing after 1m42s
CI/CD Pipeline / Integration Tests (push) Successful in 1m20s
CI/CD Pipeline / Frontend Lint (push) Has been cancelled
CI/CD Pipeline / Build Staging API Image (push) Has been cancelled
CI/CD Pipeline / Build Staging Worker Image (push) Has been cancelled
CI/CD Pipeline / Build Staging Web Image (push) Has been cancelled
CI/CD Pipeline / Deploy Staging (Watchtower auto-deploy) (push) Has been cancelled
CI/CD Pipeline / Staging E2E Tests (push) Has been cancelled
CI/CD Pipeline / Staging API Integration Tests (push) Has been cancelled
CI/CD Pipeline / Build Production API Image (push) Has been cancelled
CI/CD Pipeline / Build Production Worker Image (push) Has been cancelled
CI/CD Pipeline / Build Production Web Image (push) Has been cancelled
CI/CD Pipeline / Deploy Production (push) Has been cancelled
CI/CD Pipeline / Production Browser E2E (push) Has been cancelled
fix(security): 后端安全技术债务第二轮（P1+P2+P2） - audio_merger裸subprocess下沉 + ffmpeg_utils架构下沉到packages/shared - _verify_url_accessible重定向每跳SSRF校验 - url_security下载文件魔数校验 - 新增33个单测 |
||
|
xiaoxia
|
7e172c0907 |
fix: PR#312安全债务 4个P1修复（路径安全+数量上限） (#322)
CI/CD Pipeline / Build Staging Worker Image (push) Has been cancelled
CI/CD Pipeline / Deploy Staging (Watchtower auto-deploy) (push) Has been cancelled
CI/CD Pipeline / Staging E2E Tests (push) Has been cancelled
CI/CD Pipeline / Staging API Integration Tests (push) Has been cancelled
CI/CD Pipeline / Production Browser E2E (push) Failing after 1533h44m14s
CI/CD Pipeline / Deploy Production (push) Failing after 1533h44m16s
CI/CD Pipeline / Build Production Web Image (push) Failing after 1533h44m17s
CI/CD Pipeline / Build Production Worker Image (push) Failing after 1533h44m17s
CI/CD Pipeline / Build Production API Image (push) Failing after 1533h44m17s
CI/CD Pipeline / Validate Code Quality And Tests (push) Has been skipped
CI/CD Pipeline / Unit Tests (push) Has been skipped
CI/CD Pipeline / Integration Tests (push) Has been skipped
CI/CD Pipeline / Frontend Lint (push) Has been skipped
CI/CD Pipeline / Build Staging API Image (push) Has been skipped
CI/CD Pipeline / Build Staging Web Image (push) Has been skipped
|