qinglong
634496d975
修复: - Sentinel 路由 require_auth=False → True (严重: 未认证可访问) - API Key 创建/删除加 csrf_protect=True - SSRF 防护: 测试连接仅允许 http/https scheme - 插件网络鉴权: 已加载插件自动放行 (不再要求 plugin.network.access) - Sentinel 权限列表补充 plugin.network.access Co-Authored-By: Claude <noreply@anthropic.com>
24 lines
549 B
JSON
24 lines
549 B
JSON
{
|
|
"c8a2c46a": {
|
|
"plugin_name": "sentinel",
|
|
"permissions": [
|
|
"plugin.sentinel.read",
|
|
"plugin.sentinel.write",
|
|
"plugin.network.access",
|
|
"framework.event.subscribe",
|
|
"framework.command.execute"
|
|
],
|
|
"timestamp": 16743.234435695
|
|
},
|
|
"87725a61": {
|
|
"plugin_name": "sentinel",
|
|
"permissions": [
|
|
"plugin.sentinel.read",
|
|
"plugin.sentinel.write",
|
|
"plugin.network.access",
|
|
"framework.event.subscribe",
|
|
"framework.command.execute"
|
|
],
|
|
"timestamp": 16793.53933677
|
|
}
|
|
} |