changelog: 50f6d7e - security: 全面安全审计修复（22项漏洞）

changelogs/2026-03/2026-03-17_1217_50f6d7e_security_2.md

@@ -0,0 +1,57 @@
+# 接口变更记录 — 2026-03-17 12:17
+
+> **提交** `50f6d7e` · **作者** wx · **时间** 2026-03-17 12:17:44 +0800
+>
+> security: 全面安全审计修复（22项漏洞）
+
+## 变更总览
+
+
+---
+
+## ⚙️ 配置变更
+
+- `hl-gateway/src/main/resources/application.yml` (修改)
+
+<details>
+<summary>📁 全部变更文件 (点击展开)</summary>
+
+```
+A	docs/yh/security/260317-1134-full-audit/findings.md
+M	e2e/TestDecrypt.java
+M	hl-callback-service/src/main/java/com/hulalv/callback/controller/WxCallbackController.java
+M	hl-callback-service/src/test/java/com/hulalv/callback/controller/WxCallbackControllerTest.java
+M	hl-file-service/src/main/java/com/hulalv/file/constant/FileConstants.java
+M	hl-file-service/src/main/java/com/hulalv/file/controller/FileController.java
+M	hl-file-service/src/main/java/com/hulalv/file/service/FileService.java
+M	hl-file-service/src/main/java/com/hulalv/file/service/OssService.java
+M	hl-file-service/src/test/java/com/hulalv/file/constant/FileConstantsTest.java
+M	hl-file-service/src/test/java/com/hulalv/file/service/FileServiceTest.java
+M	hl-gateway/src/main/java/com/hulalv/gateway/filter/JwtAuthFilter.java
+A	hl-gateway/src/main/java/com/hulalv/gateway/filter/RateLimitFilter.java
+A	hl-gateway/src/main/java/com/hulalv/gateway/filter/SecurityHeaderFilter.java
+M	hl-gateway/src/main/resources/application.yml
+M	hl-guide-service/src/main/java/com/hulalv/guide/service/GuideArticleService.java
+M	hl-insurance-service/src/main/java/com/hulalv/insurance/service/InsuranceOrderService.java
+M	hl-mp-service/src/main/java/com/hulalv/mp/controller/MpSearchController.java
+M	hl-order-service/src/main/java/com/hulalv/order/service/DashboardStatsService.java
+M	hl-order-service/src/main/java/com/hulalv/order/service/OrderService.java
+M	hl-product-service/src/main/java/com/hulalv/product/service/ProductService.java
+M	hl-product-service/src/main/java/com/hulalv/product/service/RouteMapGenerator.java
+M	hl-review-service/src/main/java/com/hulalv/review/service/ReviewService.java
+A	hl-task-service/src/main/java/com/hulalv/task/config/WebSocketAuthInterceptor.java
+M	hl-task-service/src/main/java/com/hulalv/task/config/WebSocketConfig.java
+M	hl-user-service/src/main/java/com/hulalv/user/controller/AdminUserController.java
+M	hl-user-service/src/main/java/com/hulalv/user/controller/SysMenuController.java
+M	hl-user-service/src/main/java/com/hulalv/user/controller/SysRoleController.java
+M	hl-user-service/src/main/java/com/hulalv/user/notification/channel/SmsChannelSender.java
+M	hl-user-service/src/main/java/com/hulalv/user/service/AdminUserService.java
+M	hl-user-service/src/main/java/com/hulalv/user/service/ExploreCategoryService.java
+M	hl-user-service/src/main/java/com/hulalv/user/service/FavoriteService.java
+M	hl-user-service/src/main/java/com/hulalv/user/service/FootprintService.java
+M	hl-user-service/src/main/java/com/hulalv/user/service/QuartzJobExecutor.java
+M	hl-user-service/src/main/java/com/hulalv/user/service/SmsService.java
+M	hl-user-service/src/main/java/com/hulalv/user/service/WechatMiniAppClient.java
+M	hl-user-service/src/test/java/com/hulalv/user/service/AdminUserServiceTest.java
+```
+</details>