5 Commits

Include renames

Author	SHA1	Message	Date
hotyue	d3d59bcfc1	revert: rollback to 784f8d5a - undo security hardening and related fixes	2026-08-10 04:58:16 +00:00
hotyueandhotyue	50cf3f21e6	security: 6-item hardening pass (OTA auth, SQLi, HMAC, SSRF, supply chain, env) (#109) ... - #106 Master OTA Telegram callback requires TG_MASTER_TOKEN authentication - #105 toggle command uses whitelist validation instead of raw SQL concat - #108 HMAC signature covers all query params (path + sorted params) on both sides - #107 Remove curl -k, add internal domain SSRF interception (.local/.internal/.nip.io) - Supply chain: IPS-MAGIC integrity verification for all 6 install modules - Env: confirmed config.conf/master.conf chmod 600, no .env leak risk 9 files changed, +120/-13 lines Co-authored-by: hotyue <hotyue@users.noreply.github.com>	2026-08-10 12:22:05 +08:00
hotyue	827381dd7a	fix(core): 引入 URL 时间戳动态参数实现 GitHub Raw CDN 缓存物理穿透，彻底消除新版发布后的 404 假死与 OTA 获取延迟问题	2026-06-03 04:59:39 +00:00
hotyue	25c5ad259b	fix(master): 回滚污染拦截策略，对 install_master.sh 使用子进程独立文件流执行，彻底解决拉取代码卡死及输入串行问题，原版逻辑 100% 无损分拆	2026-06-03 03:19:08 +00:00
hotyue	a7556692a5	feat(arch): 完成 Master 端安装逻辑解耦。复用底层环境模块，引入 build_master 编排器与 master_setup 业务流，至此全系统部署逻辑彻底实现高内聚低耦合	2026-06-03 01:29:38 +00:00