qinglong
634496d975
修复: - Sentinel 路由 require_auth=False → True (严重: 未认证可访问) - API Key 创建/删除加 csrf_protect=True - SSRF 防护: 测试连接仅允许 http/https scheme - 插件网络鉴权: 已加载插件自动放行 (不再要求 plugin.network.access) - Sentinel 权限列表补充 plugin.network.access Co-Authored-By: Claude <noreply@anthropic.com>
26 lines
500 B
YAML
26 lines
500 B
YAML
http_port: 4200
|
|
last_updated: 16793.540021822
|
|
plugin_routes:
|
|
sentinel:
|
|
- methods:
|
|
- GET
|
|
path: /sentinel/api/nodes
|
|
require_auth: true
|
|
- methods:
|
|
- POST
|
|
path: /sentinel/api/nodes
|
|
require_auth: true
|
|
- methods:
|
|
- POST
|
|
path: /sentinel/api/nodes/test
|
|
require_auth: true
|
|
- methods:
|
|
- POST
|
|
path: /sentinel/api/nodes/delete
|
|
require_auth: true
|
|
- methods:
|
|
- POST
|
|
path: /sentinel/api/plugin/sentinel
|
|
require_auth: true
|
|
websocket_port: 4240
|