hl-api-changelog/changelogs/2026-03/2026-03-17_1217_50f6d7e_security_2.md

57 行
3.1 KiB
Markdown

此文件含有模棱两可的 Unicode 字符

此文件含有可能会与其他字符混淆的 Unicode 字符。 如果您是想特意这样的,可以安全地忽略该警告。 使用 Escape 按钮显示他们。

# 接口变更记录 — 2026-03-17 12:17
> **提交** `50f6d7e` · **作者** wx · **时间** 2026-03-17 12:17:44 +0800
>
> security: 全面安全审计修复22项漏洞
## 变更总览
---
## ⚙️ 配置变更
- `hl-gateway/src/main/resources/application.yml` (修改)
<details>
<summary>📁 全部变更文件 (点击展开)</summary>
```
A docs/yh/security/260317-1134-full-audit/findings.md
M e2e/TestDecrypt.java
M hl-callback-service/src/main/java/com/hulalv/callback/controller/WxCallbackController.java
M hl-callback-service/src/test/java/com/hulalv/callback/controller/WxCallbackControllerTest.java
M hl-file-service/src/main/java/com/hulalv/file/constant/FileConstants.java
M hl-file-service/src/main/java/com/hulalv/file/controller/FileController.java
M hl-file-service/src/main/java/com/hulalv/file/service/FileService.java
M hl-file-service/src/main/java/com/hulalv/file/service/OssService.java
M hl-file-service/src/test/java/com/hulalv/file/constant/FileConstantsTest.java
M hl-file-service/src/test/java/com/hulalv/file/service/FileServiceTest.java
M hl-gateway/src/main/java/com/hulalv/gateway/filter/JwtAuthFilter.java
A hl-gateway/src/main/java/com/hulalv/gateway/filter/RateLimitFilter.java
A hl-gateway/src/main/java/com/hulalv/gateway/filter/SecurityHeaderFilter.java
M hl-gateway/src/main/resources/application.yml
M hl-guide-service/src/main/java/com/hulalv/guide/service/GuideArticleService.java
M hl-insurance-service/src/main/java/com/hulalv/insurance/service/InsuranceOrderService.java
M hl-mp-service/src/main/java/com/hulalv/mp/controller/MpSearchController.java
M hl-order-service/src/main/java/com/hulalv/order/service/DashboardStatsService.java
M hl-order-service/src/main/java/com/hulalv/order/service/OrderService.java
M hl-product-service/src/main/java/com/hulalv/product/service/ProductService.java
M hl-product-service/src/main/java/com/hulalv/product/service/RouteMapGenerator.java
M hl-review-service/src/main/java/com/hulalv/review/service/ReviewService.java
A hl-task-service/src/main/java/com/hulalv/task/config/WebSocketAuthInterceptor.java
M hl-task-service/src/main/java/com/hulalv/task/config/WebSocketConfig.java
M hl-user-service/src/main/java/com/hulalv/user/controller/AdminUserController.java
M hl-user-service/src/main/java/com/hulalv/user/controller/SysMenuController.java
M hl-user-service/src/main/java/com/hulalv/user/controller/SysRoleController.java
M hl-user-service/src/main/java/com/hulalv/user/notification/channel/SmsChannelSender.java
M hl-user-service/src/main/java/com/hulalv/user/service/AdminUserService.java
M hl-user-service/src/main/java/com/hulalv/user/service/ExploreCategoryService.java
M hl-user-service/src/main/java/com/hulalv/user/service/FavoriteService.java
M hl-user-service/src/main/java/com/hulalv/user/service/FootprintService.java
M hl-user-service/src/main/java/com/hulalv/user/service/QuartzJobExecutor.java
M hl-user-service/src/main/java/com/hulalv/user/service/SmsService.java
M hl-user-service/src/main/java/com/hulalv/user/service/WechatMiniAppClient.java
M hl-user-service/src/test/java/com/hulalv/user/service/AdminUserServiceTest.java
```
</details>