 logan
|
4ac2528f8e
|
fix: 审核引擎优化 + 执行结果结构化展示
后端审核规则修复:
- Redis SEC-001: SET/DEL等常规命令不再误报AUTH要求，改为仅对管理级命令WARNING
- Redis SEC-003: 降级为INFO，排除已由CMD-001拦截的FLUSHDB/FLUSHALL
- Redis key提取: 排除CONFIG/ACL等管理命令，不再把子命令参数误认为key名
- MySQL SEC-006: 新增GRANT ALL/REVOKE ALL全局权限拦截
- MySQL SEC-007: 新增LOAD DATA/LOAD XML拦截
- MySQL SEC-008: 新增SLEEP()/BENCHMARK()时间盲注拦截
- MySQL SEC-009: 新增INTO OUTFILE/DUMPFILE文件写入拦截
前端执行结果结构化:
- TicketDetailPage执行结果从原始JSON改为结构化展示
- 解析JSON展示: 状态徽章+影响行数+耗时+验证状态
- Errors/Warnings逐条渲染: 红色错误框+黄色警告框+具体消息
- 删除废弃的executeStats/renderExecuteStats
其他: 审核规则6分组/慢查询移除/查询数据重命名/AuditLogs修复
测试: 1040 passed, TSC零错误
|
2026-05-24 01:31:33 +08:00 |
|
|
logan
|
2cfd45c9d1
|
feat: run.sh restart/stop/status + real DB connector + GitLab CI
1. run.sh: start/stop/restart/status/logs/build/test
- PID file management in .pids/
- Colored output, health check wait, log files
- Auto alembic migrate on start
2. DB Connector (replaces mock aiomysql):
- MySQL: aiomysql (connect/query/dml/test)
- PostgreSQL: asyncpg (connect/query/dml/test)
- SQLite: sqlite3 via executor (connect/query/dml/test)
- Unified interface: DBConnector.test_connection/execute_query/execute_dml
- Connection test returns version + latency
3. GitLab CI/CD pipeline:
- test: backend pytest + frontend build
- build: Docker images (manual trigger)
- deploy: SSH deploy (manual trigger)
- Cache: pip + node_modules
Tests: 128 passing, frontend build: OK
|
2026-05-22 15:16:59 +08:00 |
|