erio bf6fe5e962 fix: custom menu security hardening and code quality improvements ...

- Add admin menu permission check in CustomPageView (visibility + role)
- Sanitize SVG content with DOMPurify before v-html rendering (XSS prevention)
- Decouple router.go from dto package using anonymous struct
- Consolidate duplicate parseCustomMenuItems into dto.ParseCustomMenuItems
- Enhance menu item validation (count, length, ID uniqueness limits)
- Add audit logging for purchase_subscription and custom_menu_items changes
- Update API contract test to include custom_menu_items field

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

2026-03-03 06:23:56 +08:00

..

config

feat(proxy): 集中代理 URL 验证并实现全局 fail-fast

2026-03-02 16:04:20 +08:00

domain

feat(sync): full code sync from release

2026-02-28 15:01:20 +08:00

handler

fix: custom menu security hardening and code quality improvements

2026-03-03 06:23:56 +08:00

integration

test: 完善自动化测试体系（7个模块，73个任务）

2026-02-08 12:05:39 +08:00

middleware

test: 完善自动化测试体系（7个模块，73个任务）

2026-02-08 12:05:39 +08:00

model

feat: 错误透传规则支持 skip_monitoring 跳过运维监控记录

2026-02-10 11:42:39 +08:00

pkg

feat(proxy): 集中代理 URL 验证并实现全局 fail-fast

2026-03-02 16:04:20 +08:00

repository

feat(proxy): 集中代理 URL 验证并实现全局 fail-fast

2026-03-02 16:04:20 +08:00

server

fix: custom menu security hardening and code quality improvements

2026-03-03 06:23:56 +08:00

service

fix: include custom_menu_items in GetPublicSettingsForInjection

2026-03-03 06:21:23 +08:00

setup

chore(logging): 完成后端日志审计与结构化迁移

2026-02-12 19:01:09 +08:00

testutil

feat(sync): full code sync from release

2026-02-28 15:01:20 +08:00

util

feat(sync): full code sync from release

2026-02-28 15:01:20 +08:00

web

feat(sora): 对齐 Sora OAuth 流程并隔离网关请求路径

2026-02-19 08:02:56 +08:00