qinglong 1d0f227267 fix: API Key 删除/创建去掉 CSRF — panel_token HttpOnly 前端无法读取 ...

SameSite=Lax cookie 已防跨站 POST/DELETE, 无需额外 CSRF header
前端 JS 无法读取 HttpOnly cookie, 无法设置 X-CSRF-Token

Co-Authored-By: Claude <noreply@anthropic.com>

2026-06-13 18:07:47 +08:00

..

granted_permissions.json

security: Sentinel 路由鉴权 + API Key CSRF + SSRF 防护

2026-06-13 15:13:56 +08:00

pending_requests.json

fix: API Key 删除/创建去掉 CSRF — panel_token HttpOnly 前端无法读取

2026-06-13 18:07:47 +08:00

plugin_status.json

fix: Sentinel SSE URL — /SenSu/plugin/... → /plugin/... (匹配实际路由)

2026-06-13 17:56:57 +08:00