LukeMackin 12e00bf683 fix: 安全—路径沙箱+命令字符过滤+移除unused spire ...

- safePath(): resolve→startsWith(BASE_DIR)防路径遍历
- sanitizeCommand(): 拒绝;&|$(){}等shell元字符
- 移除unused import(spawn,DeviceIdentity)

2026-07-22 20:12:05 +08:00

.reasonix

feat: H5热更新 v6→v7 — 远端version.txt=v7 + index-v7.html

2026-07-21 15:00:59 +08:00

docs

docs: 信息优化方案 + OTA跨文档链接修复

2026-07-19 01:39:21 +08:00

ota

fix: 完整重写index-stable.html(gear⚙+overflow) SHA256同步三渠道

2026-07-22 12:51:40 +08:00

packages

fix: 安全—路径沙箱+命令字符过滤+移除unused spire

2026-07-22 20:12:05 +08:00

.gitignore

chore: 清理OCR临时文件+截图+调试脚本,更新.gitignore

2026-07-20 12:57:14 +08:00

cdp-read.js

feat: H5热更新 v6→v7 — 远端version.txt=v7 + index-v7.html

2026-07-21 15:00:59 +08:00

index.js

fix: 审查阻断—移除MainApplication引用+cleartext+SYSTEM_ALERT_WINDOW

2026-07-22 19:37:51 +08:00

package.json

feat(android): OTA双轨更新 — shared版本号+Android Expo/PackageInstaller

2026-07-19 01:41:36 +08:00

pnpm-lock.yaml

feat: MCP Server运行成功—stdio传输+7个Tool+Zod schema

2026-07-22 20:06:40 +08:00

pnpm-workspace.yaml

feat(android): OTA双轨更新 — shared版本号+Android Expo/PackageInstaller

2026-07-19 01:41:36 +08:00

releases.json

feat: H5热更新 v6→v7 — 远端version.txt=v7 + index-v7.html

2026-07-21 15:00:59 +08:00

s2.png

feat: frame.html 加入 APK 版本检测

2026-07-22 16:46:17 +08:00

s.png

chore: 清理tmp_js.js

2026-07-22 01:09:42 +08:00

window_dump.xml

fix: v6页checkUpdate+applyUpdate全用Bridge(移除fetch+CSP误伤)

2026-07-21 23:07:45 +08:00

Description

No description provided

13 MiB

Languages

TypeScript 66.3%

JavaScript 14.2%

HTML 11.3%

Shell 5.1%

Kotlin 3.1%