6 Commits

Author	SHA1	Message	Date
hotyue	d3d59bcfc1	revert: rollback to 784f8d5a - undo security hardening and related fixes	2026-08-10 04:58:16 +00:00
hotyue	50cf3f21e6	security: 6-item hardening pass (OTA auth, SQLi, HMAC, SSRF, supply chain, env) (#109) ... - #106 Master OTA Telegram callback requires TG_MASTER_TOKEN authentication - #105 toggle command uses whitelist validation instead of raw SQL concat - #108 HMAC signature covers all query params (path + sorted params) on both sides - #107 Remove curl -k, add internal domain SSRF interception (.local/.internal/.nip.io) - Supply chain: IPS-MAGIC integrity verification for all 6 install modules - Env: confirmed config.conf/master.conf chmod 600, no .env leak risk 9 files changed, +120/-13 lines Co-authored-by: hotyue <hotyue@users.noreply.github.com>	2026-08-10 12:22:05 +08:00
hotyue	b120302afd	refactor(core): 实施全局动态版本嗅探 (SSOT)。彻底移除引导外壳与内部安装链路中硬编码的静态版本号文本，提升 CI/CD 自动化持续集成效率	2026-06-04 06:51:12 +00:00
hotyue	ce86c1c5e5	fix(master): 修复中枢别名(MASTER_NODE_NAME)的中文乱码截断。同步引入 UTF-8 强挂载与原生字符切片防御机制 (#87)	2026-06-04 06:28:14 +00:00
hotyue	25c5ad259b	fix(master): 回滚污染拦截策略，对 install_master.sh 使用子进程独立文件流执行，彻底解决拉取代码卡死及输入串行问题，原版逻辑 100% 无损分拆	2026-06-03 03:19:08 +00:00
hotyue	a7556692a5	feat(arch): 完成 Master 端安装逻辑解耦。复用底层环境模块，引入 build_master 编排器与 master_setup 业务流，至此全系统部署逻辑彻底实现高内聚低耦合	2026-06-03 01:29:38 +00:00