前端提速 + 安全加固：预构建CSS、边缘缓存、SSRF、密钥加密等#1
Merged
Conversation
前端访问速度： - 首页 Tailwind 由 Play CDN 运行时编译改为构建期 purge 预编译（/static/home.css），移除 CSP unsafe-eval - 新增匿名首页 Cloudflare 边缘缓存（仅限无登录态/私人 cookie，按 lang/catalog/sort/tag 分键） - getSystemSettings 由 19 次串行查询合并为 1 次；/static 由 no-store 改为 ETag 协商缓存；字体 preconnect 安全与健壮性（前序会话）： - 新增 SSRF 防护（favicon/预览/健康检查）；AI/WebDAV 端点按设计保留内网访问 - 敏感密钥 AES-GCM 加密存储（依赖 env.SECRET_KEY）；登录失败限速；会话绝对 TTL；API token 写入节流 - 书签导出 HTML 转义修复；API 5xx 错误信息泛化；CSP(Report-Only)；url_key 去重索引；分类 SVG 白名单校验；i18n 精简 验证：node --check（51 文件）+ node --test（31 通过）+ 模块加载烟雾测试 Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
前端访问速度：
安全与健壮性（前序会话）：
验证：node --check（51 文件）+ node --test（31 通过）+ 模块加载烟雾测试