From da50aa1e1d584b37854df70109f086651271c86c Mon Sep 17 00:00:00 2001 From: API Changelog Bot Date: Tue, 17 Mar 2026 12:17:44 +0800 Subject: [PATCH] =?UTF-8?q?changelog:=2050f6d7e=20-=20security:=20?= =?UTF-8?q?=E5=85=A8=E9=9D=A2=E5=AE=89=E5=85=A8=E5=AE=A1=E8=AE=A1=E4=BF=AE?= =?UTF-8?q?=E5=A4=8D=EF=BC=8822=E9=A1=B9=E6=BC=8F=E6=B4=9E=EF=BC=89?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit --- .../2026-03-17_1217_50f6d7e_security_2.md | 57 +++++++++++++++++++ 1 file changed, 57 insertions(+) create mode 100644 changelogs/2026-03/2026-03-17_1217_50f6d7e_security_2.md diff --git a/changelogs/2026-03/2026-03-17_1217_50f6d7e_security_2.md b/changelogs/2026-03/2026-03-17_1217_50f6d7e_security_2.md new file mode 100644 index 0000000..e99c429 --- /dev/null +++ b/changelogs/2026-03/2026-03-17_1217_50f6d7e_security_2.md @@ -0,0 +1,57 @@ +# 接口变更记录 — 2026-03-17 12:17 + +> **提交** `50f6d7e` · **作者** wx · **时间** 2026-03-17 12:17:44 +0800 +> +> security: 全面安全审计修复（22项漏洞） + +## 变更总览 + + +--- + +## ⚙️ 配置变更 + +- `hl-gateway/src/main/resources/application.yml` (修改) + +
+📁 全部变更文件 (点击展开) + +``` +A docs/yh/security/260317-1134-full-audit/findings.md +M e2e/TestDecrypt.java +M hl-callback-service/src/main/java/com/hulalv/callback/controller/WxCallbackController.java +M hl-callback-service/src/test/java/com/hulalv/callback/controller/WxCallbackControllerTest.java +M hl-file-service/src/main/java/com/hulalv/file/constant/FileConstants.java +M hl-file-service/src/main/java/com/hulalv/file/controller/FileController.java +M hl-file-service/src/main/java/com/hulalv/file/service/FileService.java +M hl-file-service/src/main/java/com/hulalv/file/service/OssService.java +M hl-file-service/src/test/java/com/hulalv/file/constant/FileConstantsTest.java +M hl-file-service/src/test/java/com/hulalv/file/service/FileServiceTest.java +M hl-gateway/src/main/java/com/hulalv/gateway/filter/JwtAuthFilter.java +A hl-gateway/src/main/java/com/hulalv/gateway/filter/RateLimitFilter.java +A hl-gateway/src/main/java/com/hulalv/gateway/filter/SecurityHeaderFilter.java +M hl-gateway/src/main/resources/application.yml +M hl-guide-service/src/main/java/com/hulalv/guide/service/GuideArticleService.java +M hl-insurance-service/src/main/java/com/hulalv/insurance/service/InsuranceOrderService.java +M hl-mp-service/src/main/java/com/hulalv/mp/controller/MpSearchController.java +M hl-order-service/src/main/java/com/hulalv/order/service/DashboardStatsService.java +M hl-order-service/src/main/java/com/hulalv/order/service/OrderService.java +M hl-product-service/src/main/java/com/hulalv/product/service/ProductService.java +M hl-product-service/src/main/java/com/hulalv/product/service/RouteMapGenerator.java +M hl-review-service/src/main/java/com/hulalv/review/service/ReviewService.java +A hl-task-service/src/main/java/com/hulalv/task/config/WebSocketAuthInterceptor.java +M hl-task-service/src/main/java/com/hulalv/task/config/WebSocketConfig.java +M hl-user-service/src/main/java/com/hulalv/user/controller/AdminUserController.java +M hl-user-service/src/main/java/com/hulalv/user/controller/SysMenuController.java +M hl-user-service/src/main/java/com/hulalv/user/controller/SysRoleController.java +M hl-user-service/src/main/java/com/hulalv/user/notification/channel/SmsChannelSender.java +M hl-user-service/src/main/java/com/hulalv/user/service/AdminUserService.java +M hl-user-service/src/main/java/com/hulalv/user/service/ExploreCategoryService.java +M hl-user-service/src/main/java/com/hulalv/user/service/FavoriteService.java +M hl-user-service/src/main/java/com/hulalv/user/service/FootprintService.java +M hl-user-service/src/main/java/com/hulalv/user/service/QuartzJobExecutor.java +M hl-user-service/src/main/java/com/hulalv/user/service/SmsService.java +M hl-user-service/src/main/java/com/hulalv/user/service/WechatMiniAppClient.java +M hl-user-service/src/test/java/com/hulalv/user/service/AdminUserServiceTest.java +``` +
\ No newline at end of file