MarSeventh
0bc8583af8
style: align admin pagination and dark theme states
2026-07-21 21:30:45 +08:00
MarSeventh
325f9490b3
style: refine upload card prompt icon
2026-07-21 20:21:27 +08:00
MarSeventh
06c5fd0da9
docs: update demo pictures in readme
2026-07-21 17:35:13 +08:00
MarSeventh
5c35bcbf85
chore: update frontend bundle
2026-07-21 17:12:28 +08:00
MarSeventh
42d1a4f67e
chore: update frontend bundle and project assets
2026-07-21 15:53:54 +08:00
MarSeventh
41eef2d63b
fix: refresh frontend assets for upload UI
2026-07-21 00:57:12 +08:00
MarSeventh
bd8163c114
docs: optimize readme images
2026-07-21 00:33:13 +08:00
MarSeventh
cd5f32ba0a
feat: add wallpaper toggle and refresh frontend assets
2026-07-21 00:06:37 +08:00
叁月柒 and GitHub
9e33fbe95c
Merge pull request #638 from LuoH-AN/feat/frontend-flat-redesign
...
build: update frontend assets with flat redesign & glassmorphism
2026-07-20 23:10:45 +08:00
sunian6780 and LuoH-AN
d7aabf266d
build: update frontend assets with flat redesign & glassmorphism
...
Rebuild frontend from Sanyue-ImgHub feat/flat-redesign branch:
- unified glassmorphism (--glass-bg/border/shadow + backdrop-filter)
- dark mode: muted slate-blue primary (#4A5D9B), dimmed selected states
- upload/admin pages: glass cards, dragger, search box, tables
- new global wallpaper on/off switch
- misc dark-mode fixes (image brightness, dialogs, messages)
Co-Authored-By: LuoH-AN <[email protected]
2026-07-20 23:05:36 +08:00
MarSeventh
07fe2501b4
perf(docker): reduce runtime image size
2026-07-18 23:41:36 +08:00
MarSeventh
1338c0c026
docs: integrate storage backends into introduction
2026-07-18 17:49:03 +08:00
MarSeventh
8cf6f90af7
docs: list supported storage backends
2026-07-18 17:44:24 +08:00
MarSeventh
d20aa0e033
docs: improve bilingual readme readability
2026-07-18 17:36:11 +08:00
MarSeventh
62f7d8a8de
docs: reorganize bilingual readme sections
2026-07-18 17:19:45 +08:00
MarSeventh
b9847faa52
docs: rename sponsor section to partners
2026-07-18 17:03:34 +08:00
MarSeventh
1281cacb0c
docs: restore sponsor logo layout
2026-07-18 16:57:27 +08:00
MarSeventh
ccc66683b5
docs: refine bilingual readme content
2026-07-18 16:50:45 +08:00
MarSeventh
2703d9a42f
docs: update readme
2026-07-18 16:16:25 +08:00
MarSeventh
57e803dd93
docs: update readme
2026-07-18 16:12:22 +08:00
MarSeventh
79edd3f59f
build: update frontend assets
2026-07-15 21:25:52 +08:00
MarSeventh
18770ca63b
build: update frontend assets
2026-07-15 20:59:01 +08:00
MarSeventh
f50a170457
feat: refresh announcement read status
2026-07-15 20:46:52 +08:00
MarSeventh
5d9549b0ee
docs: refine bilingual demo presentation
2026-07-15 19:45:36 +08:00
MarSeventh
6223cb3eaa
fix: clarify optional compatibility update confirmation
2026-07-15 17:41:54 +08:00
MarSeventh
d66c102381
fix: summarize upstream sync failures
2026-07-15 17:34:15 +08:00
MarSeventh
2ee4b604d3
fix: clarify manual update summary
2026-07-15 17:30:38 +08:00
MarSeventh
3a4e39d444
chore: remove breaking update test fixture
2026-07-15 17:25:34 +08:00
MarSeventh
77c4eb88cb
test: add breaking update guard fixture
2026-07-15 17:13:58 +08:00
MarSeventh
1aa67aca1a
feat: guard forks from breaking auto updates
2026-07-15 16:51:08 +08:00
MarSeventh
3612436f85
bump version to v2.7.5
2026-07-15 11:47:57 +08:00
叁月柒 and GitHub
5c38a414d1
Merge pull request #629 from linyulao/trae/agent-Q5lJN4
...
feat: 修复NPM漏洞
2026-07-15 11:43:08 +08:00
linyulao and traeagent
cd67cec0de
feat: 修复NPM漏洞
...
Co-authored-by: traeagent <[email protected]
2026-07-15 03:00:05 +00:00
叁月柒 and GitHub
4195f6a1d8
Merge pull request #625 from sebastiondev/fix/cwe918-fetchres-server-837c
...
fix(fetchRes): prevent SSRF in server-side URL proxy
2026-07-15 09:51:53 +08:00
Sebastion
bf2c241749
fix(api/fetchRes): mitigate SSRF by validating target URL
...
The /api/fetchRes proxy endpoint accepted an arbitrary URL from the
request body and passed it directly to fetch(), returning the response
to the caller. Any user with the site auth code could use it to reach
internal services (cloud metadata endpoints, RFC1918 hosts, loopback,
non-http(s) schemes) — a classic CWE-918 SSRF primitive.
The endpoint now:
- rejects non-http(s) schemes
- rejects URLs containing embedded credentials
- rejects hostnames resolving to loopback/private/link-local/CGNAT/
multicast/reserved ranges, IPv6 ULA/link-local, IPv4-mapped variants
and well-known cloud metadata hostnames
- follows redirects manually and re-validates each hop (max 5)
2026-07-14 21:37:14 +01:00
MarSeventh
98d9e8cc97
chore: update introduction in readme
2026-07-14 14:43:39 +08:00
MarSeventh
3be518d0cf
chore: update introduction in readme
2026-07-14 14:37:55 +08:00
MarSeventh
ae57ff5092
chore: add ecosystem chapter to readme
2026-07-13 23:47:59 +08:00
MarSeventh
6150f5a357
chore: add ecosystem chapter to readme
2026-07-13 23:45:28 +08:00
MarSeventh
06458052c7
chore: update ecosystem entry in readme
2026-07-13 21:59:43 +08:00
MarSeventh
de520707fd
docs: consolidate the announcement entry into discussions
2026-07-13 10:51:10 +08:00
MarSeventh
97decfbc4a
docs: consolidate the announcement entry into discussions
2026-07-13 10:48:07 +08:00
MarSeventh
4044d6acca
chore: update readme
2026-07-12 22:10:57 +08:00
MarSeventh
ad7176d7c2
docs: remove payment QR codes
2026-07-12 21:50:29 +08:00
MarSeventh
f4102515b9
style: beautify some style in admin pages
2026-07-11 19:06:12 +08:00
MarSeventh
9e543358ea
chore: update readme
2026-07-09 11:57:17 +08:00
MarSeventh
89a1cef8a4
chore: update readme
2026-07-07 17:15:23 +08:00
MarSeventh
235e6a6fd4
chore: update demo picture in readme
2026-07-07 16:52:06 +08:00
MarSeventh
75eafc7c56
chore: update star-history picture in readme
2026-07-07 16:50:32 +08:00
MarSeventh
87a7d1b83c
fix worker deploy name fallback
2026-07-02 12:20:43 +08:00
MarSeventh