倪程伟 2f46619e5b fix(wiki): close IDOR in WikiRelationController & WikiEntityController (cross-KB id binding) ... Every endpoint now binds its independent id param to an authorized KB: rawId/chunkId resolve-then-workspace-check, pageId is asserted to belong to the path kbId, and slugs stay kbId-scoped. Adds unit tests for same-KB/cross-KB/unknown cases.		2026-06-28 14:41:19 +08:00
..
src	fix(wiki): close IDOR in WikiRelationController & WikiEntityController (cross-KB id binding)	2026-06-28 14:41:19 +08:00
Dockerfile	fix(docker): honor SPRING_PROFILES_ACTIVE instead of pinning the mysql profile	2026-06-14 16:47:16 +08:00
pom.xml	fix(db): make KingbaseES driver opt-in and restore default SSRF guard	2026-06-14 10:34:35 +08:00
settings.xml	build(maven): declare US + CN repositories in pom.xml, drop opaque mirror	2026-04-25 09:56:17 +08:00