qing 00ce3eac6a fix(waf): 修复P3安全审计缺陷 ...

P3-1: logclient 复用 TCP 长连接，失败时重建，消除 TIME_WAIT 堆积
P3-2: TLS 显式限定 CipherSuites + CurvePreferences，排除弱加密套件
P3-3: CheckInput query 编码改用 url.Parse + Query().Encode()

修复率 76% -> 94%（P3 全部清零，仅剩 P0-3 为设计依赖）

2026-08-08 02:39:22 +08:00

..

ai_review_SECURITY_AUDIT_20260801.md

docs(security): 更新全部模块审计报告，添加代码验证记录

2026-08-03 14:12:45 +08:00

aibox_SECURITY_AUDIT_20260801.md

docs(security): 修正安全审计文档与代码不一致

2026-08-06 15:25:07 +00:00

BotOps_SECURITY_AUDIT_20260801.md

docs(security): 更新全部模块审计报告，添加代码验证记录

2026-08-03 14:12:45 +08:00

captcha_SECURITY_AUDIT_20260801.md

docs(security): 修正安全审计文档与代码不一致

2026-08-06 15:25:07 +00:00

confs_SECURITY_AUDIT_20260801.md

docs(security): 更新全部模块审计报告，添加代码验证记录

2026-08-03 14:12:45 +08:00

core_SECURITY_AUDIT_20260801.md

docs(security): 修正安全审计文档与代码不一致

2026-08-06 15:25:07 +00:00

db2_SECURITY_AUDIT_20260806.md

fix(db2): 修复第六轮审计定位的 4 个问题并更新审计文档

2026-08-07 21:42:06 +08:00

db_SECURITY_AUDIT_20260801.md

docs(security): 更新全部模块审计报告，添加代码验证记录

2026-08-03 14:12:45 +08:00

DEPLOY_SECURITY_AUDIT_20260801.md

docs: aggregate project documentation under docs/ with unified index

2026-08-03 13:21:48 +08:00

DEPS_SECURITY_AUDIT_20260801.md

docs(security): 修正安全审计文档与代码不一致

2026-08-06 15:25:07 +00:00

dnfs2_SECURITY_AUDIT_20260808.md

fix(dnfs2): 第2轮审计修复 db 错误处理不一致

2026-08-08 01:44:04 +08:00

dnfs_SECURITY_AUDIT_20260801.md

docs(security): 更新全部模块审计报告，添加代码验证记录

2026-08-03 14:12:45 +08:00

gateway_SECURITY_AUDIT_20260801.md

docs(security): 修正安全审计文档与代码不一致

2026-08-06 15:25:07 +00:00

gateway_SECURITY_AUDIT_20260807.md

fix(gateway,libhttp): 修复进程无法退出bug，完成P0安全问题修复

2026-08-07 23:07:35 +08:00

libhttp_SECURITY_AUDIT_20260803.md

docs(security): 修正安全审计文档与代码不一致

2026-08-06 15:25:07 +00:00

libmsg_SECURITY_AUDIT_20260806.md

fix(libmsg): security audit round 4 - eliminate residual race + atomic server_fd

2026-08-07 21:27:05 +08:00

libsqlite3_SECURITY_AUDIT_20260806.md

docs(security): 更新 libsqlite3 审计报告修复状态

2026-08-06 18:14:01 +00:00

libth_SECURITY_AUDIT_20260804.md

docs: 新增 libth 安全审计与 aibox 开放版开发计划

2026-08-04 19:02:22 +08:00

pymsg_SECURITY_AUDIT_20260801.md

fix(pymsg): 异常信息脱敏与JSON深度/大数字限制，防信息泄露与DoS

2026-08-03 22:30:17 +08:00

SECURITY_HARDENING_PLAN_20260803.md

docs(security): 修正安全审计文档与代码不一致

2026-08-06 15:25:07 +00:00

smtp_SECURITY_AUDIT_20260801.md

feat(aibox): 创建/安装技能工具统一生成 .md 扩展名 + 下线旧版 smtp.py

2026-08-04 08:26:57 +08:00

static_SECURITY_AUDIT_20260801.md

fix(static): 第2轮审计修复12项安全缺陷

2026-08-08 02:21:08 +08:00

waf_SECURITY_AUDIT_20260801.md

fix(waf): 修复P3安全审计缺陷

2026-08-08 02:39:22 +08:00