xiaoxia/xiaoxia-saas
1
0
Fork 0
Code Issues 14 Pull Requests 3 Actions 4 Packages Projects Releases 7 Wiki Activity

test(wave128): url_security纯逻辑抽离 + 110单测 #1031

Closed
xiaoxia wants to merge 1 commits from test/wave128-url-security into develop
pull from: test/wave128-url-security
merge into: xiaoxia:develop
Conversation 3 Commits 1 Files Changed 3
+848 -362

1 Commits

Author SHA1 Message Date
AI Bot c7a7c019a3 test(wave128): url_security纯逻辑抽离+110单测
CI/CD Pipeline / Check if frontend-only change (pull_request) Successful in 5s
Details
CI/CD Pipeline / Validate - Type Check (mypy) (pull_request) Successful in 1m2s
Details
CI/CD Pipeline / Validate - Code Quality (pull_request) Failing after 1m37s
Details
CI/CD Pipeline / Frontend Lint (pull_request) Failing after 36s
Details
CI/CD Pipeline / Validate - Migration (alembic) (pull_request) Successful in 1m6s
Details
CI/CD Pipeline / PR Build API Image (pull_request) Successful in 1m59s
Details
CI/CD Pipeline / Build Staging API Image (pull_request) Has been skipped
Details
CI/CD Pipeline / Build Staging Web Image (pull_request) Has been skipped
Details
CI/CD Pipeline / Build Staging Worker Image (pull_request) Has been skipped
Details
CI/CD Pipeline / PR Build Web Image (pull_request) Successful in 3m5s
Details
CI/CD Pipeline / PR Build Worker Image (pull_request) Successful in 1m36s
Details
Preview Deploy / Deploy Preview Environment (pull_request) Successful in 45s
Details
PR Automation / Auto Approve on CI Green (pull_request) Successful in 3m0s
Details
AI Code Review / AI Code Review (pull_request) Successful in 6m24s
Details
CI/CD Pipeline / Unit Tests (pull_request) Failing after 0s
Details
CI/CD Pipeline / Frontend Unit Tests (pull_request) Has been skipped
Details
CI/CD Pipeline / Integration Tests (pull_request) Failing after 1s
Details
CI/CD Pipeline / CI Gate (pull_request) Failing after 0s
Details
ACR Cleanup / ACR Image Cleanup (pull_request_target) Failing after 0s
Details
PR Automation / Auto Merge on CI Green + Approved (pull_request) Successful in 46m23s
Details
CI/CD Pipeline / Build Production API Image (pull_request) Has been skipped
Details
CI/CD Pipeline / Build Production Web Image (pull_request) Has been skipped
Details
CI/CD Pipeline / Build Production Worker Image (pull_request) Has been skipped
Details
CI/CD Pipeline / Deploy Staging (Watchtower auto-deploy) (pull_request) Has been skipped
Details
Preview Cleanup / Cleanup Preview Environment (pull_request) Successful in 41s
Details
CI/CD Pipeline / Deploy Production (pull_request) Has been skipped
Details
CI/CD Pipeline / Staging E2E Tests (pull_request) Has been skipped
Details
CI/CD Pipeline / Staging API Integration Tests (pull_request) Has been skipped
Details
CI/CD Pipeline / ACR Image Cleanup (pull_request) Has been skipped
Details
CI/CD Pipeline / Canary Release to Production (pull_request) Has been cancelled
Details
CI/CD Pipeline / Production Browser E2E (pull_request) Has been skipped
Details 
- 新建 packages/domain/url_security.py：SSRF防护纯逻辑模块
  - URL基础校验（scheme/port/hostname/internal/IP-SSRF/trusted-domain）
  - 魔数校验纯函数（接收bytes）
  - 常量、异常类、辅助函数
- packages/shared/url_security.py 改为薄包装
  - 保留DNS解析、文件下载等有副作用逻辑
  - 纯逻辑委托给domain层，完全向后兼容
- 110个单测全覆盖：常量/内部主机名/可信域名/SSRF IP/IP判断/URL校验/魔数校验
- 修复check_ssrf_ip检查顺序：link_local/unspecified放private前
 2026-07-27 18:25:30 +08:00