weiness
500f241692
fix: prevent custom branding flash on initial load
2026-07-18 00:24:06 +08:00
Wesley Liddick and GitHub
d348193179
Merge pull request #4262 from wucm667/fix/issue-4245-root-models-alias
...
fix(codex): add root models compatibility alias
2026-07-15 16:06:59 +08:00
王鹏
60bae26a2f
fix(web): limit immutable caching to fingerprinted assets
2026-07-15 04:00:46 +08:00
wucm667
806bb23053
fix: add root Codex models alias
2026-07-14 17:16:24 +08:00
shaw
8315defe8e
Merge branch 'main' into feat/grok-video-edit-extension
2026-07-13 14:50:18 +08:00
Zven
b0fa2b352f
fix(web): bypass frontend for alpha search
2026-07-13 12:06:51 +08:00
chenjian
909b96edd2
feat: support Grok video edits and extensions
2026-07-13 10:50:42 +08:00
li
bfb827b879
fix(security): HTML-escape site_name 并对 doc_url 统一应用 sanitizeUrl
...
Refs #3839 (第 8、12 点)
2026-07-09 10:03:49 +08:00
gaoren002
5f41899705
fix: bridge codex image generation over responses
2026-04-23 15:13:57 +00:00
erio
62e80c602d
revert: completely remove all Sora functionality
2026-04-05 17:11:01 +08:00
wucm667
6028efd26c
test: 添加 injectSiteTitle 函数的单元测试
2026-03-18 14:13:52 +08:00
神乐
3403909354
fix(openai): support remote compact task
2026-03-06 18:51:05 +08:00
yangjianbo and Claude Opus 4.6
900cce20a1
feat(sora): 对齐 Sora OAuth 流程并隔离网关请求路径
...
- 新增并接通 Sora 专用 OAuth 接口与 ST/RT 换取能力
- 完成前端 Sora 授权、RT/ST 手动导入与账号创建流程
- 强化 Sora token 恢复、转发日志与网关路由隔离行为
- 补充后端服务层与路由层相关测试覆盖
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com >
2026-02-19 08:02:56 +08:00
yangjianbo and Claude Opus 4.5
c9f79dee66
feat(安全): 实现 CSP nonce 支持解决内联脚本安全问题
...
- 添加 GenerateNonce() 生成加密安全的随机 nonce
- SecurityHeaders 中间件为每个请求生成唯一 nonce
- CSP 策略支持 __CSP_NONCE__ 占位符动态替换
- embed_on.go 注入的内联脚本添加 nonce 属性
- 添加 Cloudflare Insights 域名到 CSP 允许列表
- 添加完整单元测试，覆盖率达到 89.8%
解决的问题：
- 内联脚本违反 CSP script-src 指令
- Cloudflare Insights beacon.min.js 加载被阻止
Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com >
2026-01-16 17:05:49 +08:00
weiness