fix: 全量代码审查修复 — 安全/Console/OpenAPI/类型/性能(72 项)#4

Merged

Yuerchu merged 7 commits into

mainfrom

fix/code-review-fixes

Jun 15, 2026

Commits on Jun 15, 2026

fix(security): harden untrusted spec input (SSRF allowlist, size/quantifier/proto guards)

Yuerchu
and
claude
committed
fix(security): close credential leak paths (curl injection, history redaction, oauth2/url guards)

Yuerchu
and
claude
committed
fix(security): defense-in-depth — PWA cache, CSP, plaintext-credential notice

Yuerchu
and
claude
committed
fix(console): make detail/editor/config/stats/action templates usable for id'd resources

Yuerchu
and
claude
committed
fix(openapi): circular-ref examples, generator bounds, diff/diagnostics correctness

Yuerchu
and
claude
committed
fix(types): honest exclusive bounds, reference objects, typeStr, FormData, casts

Yuerchu
and
claude
committed
fix(perf,db): memoize context values, atomic deleteSpec, db perf, optimistic rollback

Yuerchu
and
claude
committed