qing bbea1ee9d8 test(gateway): 黑盒测试重写 34 断言 + v0.8.0 增量审计闭环文档 ...

- tests/blackbox/test_gateway.py 重写为 6 段 34 断言（输入校验/whoami+admin.verify/
  captcha-image 代理/路径遍历矩阵/限流随机XFF隔离/CORS+脱敏回归），实测 32 passed/2 skipped
- helpers.py 新增 random_xff/assert_no_internal_leak/db_execute
- docs/security/gateway_SECURITY_AUDIT_20260809.md：A1-A8 增量复审（已全部修复）
- docs/reports/libhttp_remote_addr_dev_doc.md：A4 根治方案（X-Remote-Addr 可信头注入）
- docs/INDEX.md：security 29 篇/reports 12 篇同步

2026-08-09 12:15:32 +00:00

..

actpred_SECURITY_AUDIT_20260808.md

actpred: 两轮代码审计修复与文档合并

2026-08-08 19:37:41 +00:00

ai_review_SECURITY_AUDIT_20260801.md

docs(security): 更新全部模块审计报告，添加代码验证记录

2026-08-03 14:12:45 +08:00

aibox_SECURITY_AUDIT_20260801.md

docs(security): 修正安全审计文档与代码不一致

2026-08-06 15:25:07 +00:00

BotOps_SECURITY_AUDIT_20260801.md

docs(security): 更新全部模块审计报告，添加代码验证记录

2026-08-03 14:12:45 +08:00

captcha2_SECURITY_AUDIT_20260809.md

feat: captcha C++20 重写 + 安全审计修复 (P0/P1/P2/P3, 10/11 已修复)

2026-08-09 04:26:09 +00:00

captcha_SECURITY_AUDIT_20260801.md

feat: captcha C++20 重写 + 安全审计修复 (P0/P1/P2/P3, 10/11 已修复)

2026-08-09 04:26:09 +00:00

confs_SECURITY_AUDIT_20260801.md

docs(security): 更新全部模块审计报告，添加代码验证记录

2026-08-03 14:12:45 +08:00

core_SECURITY_AUDIT_20260801.md

docs(security): 修正安全审计文档与代码不一致

2026-08-06 15:25:07 +00:00

db2_SECURITY_AUDIT_20260806.md

fix(db2): 修复第六轮审计定位的 4 个问题并更新审计文档

2026-08-07 21:42:06 +08:00

db_SECURITY_AUDIT_20260801.md

docs(security): 更新全部模块审计报告，添加代码验证记录

2026-08-03 14:12:45 +08:00

DEPLOY_SECURITY_AUDIT_20260801.md

docs: aggregate project documentation under docs/ with unified index

2026-08-03 13:21:48 +08:00

DEPS_SECURITY_AUDIT_20260801.md

docs(security): 修正安全审计文档与代码不一致

2026-08-06 15:25:07 +00:00

dnfs2_SECURITY_AUDIT_20260808.md

fix(dnfs2): 第2轮审计修复 db 错误处理不一致

2026-08-08 01:44:04 +08:00

dnfs_SECURITY_AUDIT_20260801.md

docs(security): 更新全部模块审计报告，添加代码验证记录

2026-08-03 14:12:45 +08:00

fsys_SECURITY_AUDIT_20260808.md

docs(fsys): 修正 README 缓存/兼容性措辞，测试页补 video Range 用例，审计报告勘误

2026-08-08 07:52:18 +00:00

gateway_SECURITY_AUDIT_20260801.md

docs(security): 修正安全审计文档与代码不一致

2026-08-06 15:25:07 +00:00

gateway_SECURITY_AUDIT_20260807.md

fix(gateway,libhttp): 修复进程无法退出bug，完成P0安全问题修复

2026-08-07 23:07:35 +08:00

gateway_SECURITY_AUDIT_20260809.md

test(gateway): 黑盒测试重写 34 断言 + v0.8.0 增量审计闭环文档

2026-08-09 12:15:32 +00:00

libhttp_SECURITY_AUDIT_20260803.md

docs(security): libhttp 审计补充下游反馈（P2-7 peer IP / P2-8 流式响应 / P3-3 .so 脱节）

2026-08-08 06:58:24 +00:00

libmsg_SECURITY_AUDIT_20260806.md

fix(libmsg): security audit round 4 - eliminate residual race + atomic server_fd

2026-08-07 21:27:05 +08:00

libsqlite3_SECURITY_AUDIT_20260806.md

docs(security): 更新 libsqlite3 审计报告修复状态

2026-08-06 18:14:01 +00:00

libth_SECURITY_AUDIT_20260804.md

docs: 新增 libth 安全审计与 aibox 开放版开发计划

2026-08-04 19:02:22 +08:00

pymsg_SECURITY_AUDIT_20260801.md

fix(pymsg): 异常信息脱敏与JSON深度/大数字限制，防信息泄露与DoS

2026-08-03 22:30:17 +08:00

SECURITY_HARDENING_PLAN_20260803.md

docs(security): 修正安全审计文档与代码不一致

2026-08-06 15:25:07 +00:00

smtp3_SECURITY_AUDIT_20260809.md

feat: smtp3 C++20 重写 + 安全审计修复 (P0×2/P1-2/P2/P3 全部已修复)

2026-08-09 06:44:33 +00:00

smtp_SECURITY_AUDIT_20260801.md

docs: 合并 smtp 安全审计复审(0809)进初版(0801)

2026-08-09 12:03:36 +08:00

static_SECURITY_AUDIT_20260801.md

fix(static): 第2轮审计修复12项安全缺陷

2026-08-08 02:21:08 +08:00

waf_SECURITY_AUDIT_20260801.md

fix(waf): 修复P3安全审计缺陷

2026-08-08 02:39:22 +08:00