fix: 安全与备份正确性修复、性能优化、测试体系补齐 - #376

Closed

cakkl wants to merge 15 commits into

shuaiplus:mainfrom

cakkl:Developer

Commits on Sep 12, 2026

ci: 新增 verify 工作流，统一 Node 版本与脚本类型检查
 cakkl
committed
40626de
fix(security): 显式隔离 JWT 用途，并放行解密 worker 的 CSP
cakkl
committed
9b2c429
fix(backend): 把备份租约的读改写放进同一事务
 cakkl
committed
9c69a97
fix(backend): 补上 NAT64 的 SSRF 绕过，并确认写入确实生效
 cakkl
committed
fee98df
fix(backend): 补齐 migrations 的 schema 漂移，并为兜底提权记录审计事件
 cakkl
committed
c9a33eb
refactor: 移除私有的批量删除文件夹端点
 cakkl
committed
e928185
fix(backup): 「尚未配置」的备份目标不再被当成错误
 cakkl
committed
5597cc5
fix(webapp): 修复暗色对比度、无障碍名称与布局溢出
 cakkl
committed
25148f0
docs(security): 补充管理员引导与角色分配说明
 cakkl
committed
7792719
fix(backend): 导入先校验后写入，避免失败时留下半截数据
 cakkl
committed
a5ca6ab
perf(backend): 新增清理索引并消除全表扫描与串行 IO
cakkl
committed
72f5b05
fix(backup): 修正本地导出的附件内联与体积预算
 cakkl
committed
c8c2a3a
fix(webapp): 修正网站地址栏主机的裁剪
 cakkl
committed
aebbcc2
test: 引入跑真实 SQL 的测试基础设施与 200 项用例
 cakkl
committed
d500321
docs: 补上测试相关的贡献指南与 PR 检查项
 cakkl
committed
a04ab66