qinglong
634496d975
修复: - Sentinel 路由 require_auth=False → True (严重: 未认证可访问) - API Key 创建/删除加 csrf_protect=True - SSRF 防护: 测试连接仅允许 http/https scheme - 插件网络鉴权: 已加载插件自动放行 (不再要求 plugin.network.access) - Sentinel 权限列表补充 plugin.network.access Co-Authored-By: Claude <noreply@anthropic.com>
14 lines
434 B
YAML
14 lines
434 B
YAML
plugin_name: "sentinel"
|
|
permissions:
|
|
- "plugin.sentinel.read"
|
|
- "plugin.sentinel.write"
|
|
- "plugin.network.access"
|
|
- "framework.event.subscribe"
|
|
- "framework.command.execute"
|
|
|
|
permission_descriptions:
|
|
plugin.sentinel.read: "读取哨兵监控数据和节点配置"
|
|
plugin.sentinel.write: "修改哨兵节点配置"
|
|
framework.event.subscribe: "订阅框架事件"
|
|
framework.command.execute: "执行哨兵管理命令"
|