qinglong
2da52e80d0
面板密码安全: - 支持哈希存储 (password_hash/password_salt) - 登录使用 secrets.compare_digest 时序安全比较 - 回退明文兼容旧配置 - 默认密码 admin 时打印 CRITICAL 警告 文件上传安全: - 拒绝危险扩展名: .exe/.dll/.so/.sh/.bat/.ps1 等 - 拒绝敏感文件名: .htaccess/Makefile/Dockerfile 等 - 上传时检查并返回 403 CSRF 防护: - panel_auth(csrf_protect=True) 参数 - 写操作需 X-CSRF-Token header 匹配 session token - 保护范围: 文件删除/写入/创建/上传/重命名 + 项目启停 + 代理管理 Co-Authored-By: Claude <noreply@anthropic.com>
95 lines
2.4 KiB
YAML
95 lines
2.4 KiB
YAML
commands:
|
|
autoscroll:
|
|
description: '滚动控制: 切换自动滚动'
|
|
permissions:
|
|
- framework.tui.control
|
|
source: internal
|
|
create-plugin:
|
|
description: 创建新插件脚手架
|
|
permissions:
|
|
- framework.scaffold.plugin
|
|
source: internal
|
|
help:
|
|
description: 显示帮助信息
|
|
permissions:
|
|
- framework.command.help.read
|
|
source: internal
|
|
history:
|
|
description: 显示命令历史
|
|
permissions:
|
|
- framework.command.history.read
|
|
source: internal
|
|
install:
|
|
description: '从在线索引安装插件: install <name> 或 install --list'
|
|
permissions:
|
|
- framework.plugin.install
|
|
source: internal
|
|
netdiag:
|
|
description: 网络服务诊断
|
|
permissions:
|
|
- framework.network.diagnose
|
|
source: internal
|
|
permissions:
|
|
description: '权限管理: 显示权限状态'
|
|
permissions:
|
|
- framework.permission.read
|
|
source: internal
|
|
pm_plugin_status:
|
|
description: '权限管理: 查看插件权限状态'
|
|
permissions:
|
|
- framework.permission.read
|
|
source: internal
|
|
pmallow:
|
|
description: '权限管理: 同意权限请求'
|
|
permissions:
|
|
- framework.permission.read
|
|
source: internal
|
|
pmdeny:
|
|
description: '权限管理: 拒绝权限请求'
|
|
permissions:
|
|
- framework.permission.read
|
|
source: internal
|
|
pmhelp:
|
|
description: '权限管理: 显示权限命令帮助'
|
|
permissions:
|
|
- framework.permission.read
|
|
source: internal
|
|
pmignore:
|
|
description: '权限管理: 暂时忽略权限请求'
|
|
permissions:
|
|
- framework.permission.read
|
|
source: internal
|
|
pmpending:
|
|
description: '权限管理: 查看待授权请求列表'
|
|
permissions:
|
|
- framework.permission.read
|
|
source: internal
|
|
pmrequests:
|
|
description: '权限管理: 查看待授权请求列表(别名)'
|
|
permissions:
|
|
- framework.permission.read
|
|
source: internal
|
|
pmtest:
|
|
description: '权限管理: 测试权限配置文件'
|
|
permissions:
|
|
- framework.permission.read
|
|
source: internal
|
|
scroll:
|
|
description: '滚动控制: 手动滚动到底部'
|
|
permissions:
|
|
- framework.tui.control
|
|
source: internal
|
|
status:
|
|
description: 显示框架状态
|
|
permissions:
|
|
- framework.status.read
|
|
source: internal
|
|
testlog:
|
|
description: 生成测试日志
|
|
permissions:
|
|
- framework.command.test
|
|
source: internal
|
|
last_updated: 12807.090239176
|
|
plugin_commands: {}
|
|
total_commands: 18
|