spark-store/debian/changelog at cdd94c650ddfaf518fc73548839ec63b038c5066 - spark-store - GitSpark 让你的代码闪耀

spark-store-project/spark-store

mirror of https://gitee.com/spark-store-project/spark-store synced 2026-09-20 13:40:11 +08:00

Files

T

xiyidaiwa cdd94c650d fix(security): PR 审查整改 - setWindowOpenHandler 域名白名单 / openWebsite 协议校验 / 批量云端安装并发控制

- electron/main/index.ts: setWindowOpenHandler 增加 ALLOWED_EXTERNAL_HOSTS 域名后缀白名单，仅可信 https 域名可 shell.openExternal（阻断项2）
- AppDetailModal.vue: openWebsite 增加 http/https 协议校验 + noopener,noreferrer（改进项5）
- useAccountSync.ts: installCloudItems 改为分批(BATCH_SIZE=3) + Promise.allSettled 错误收集（改进项2）
- 审查误报/未改动项已贴代码实证：阻断1 v-html 已用 textContent 转义；改进3 resolveCloudInstallCandidate 已有降级匹配链；改进4 单窗口无 HMR 不重复注册；改进1 暂停/恢复主进程无 handler 维持 TODO

2026-08-13 22:38:26 +08:00

6 lines

200 B

Plaintext

Raw Blame History

 spark-store (5.2.1.6-test) UNRELEASED; urgency=medium
   * Initial release. (Closes: #nnnn)  <nnnn is the bug number of your ITP>
  -- shenmo <shenmo@spark-app.store>  Tue, 16 Jun 2026 21:45:35 +0800