mateclaw/mateclaw-server/src/test/java/vip/mate/wiki
倪程伟 2f46619e5b
fix(wiki): close IDOR in WikiRelationController & WikiEntityController (cross-KB id binding)
Every endpoint now binds its independent id param to an authorized KB: rawId/chunkId resolve-then-workspace-check, pageId is asserted to belong to the path kbId, and slugs stay kbId-scoped. Adds unit tests for same-KB/cross-KB/unknown cases.
2026-06-28 14:41:19 +08:00
..
controller fix(wiki): close IDOR in WikiRelationController & WikiEntityController (cross-KB id binding) 2026-06-28 14:41:19 +08:00
hotcache chore(test): backfill mateclaw-server/src/test/ that earlier PRIVATE_ITEMS pattern accidentally excluded 2026-05-12 17:38:08 +08:00
job/strategy fix(wiki): align HTTP status with R envelope and harden config + edit paths 2026-05-14 23:01:00 +08:00
metrics chore(test): backfill mateclaw-server/src/test/ that earlier PRIVATE_ITEMS pattern accidentally excluded 2026-05-12 17:38:08 +08:00
pipeline feat(wiki): pipeline definition CRUD/YAML API, run query API, page-created trigger 2026-05-31 07:59:41 +08:00
profile test(wiki): cover StageInstructions string/object deserialization 2026-06-26 14:34:32 +08:00
repository feat(wiki): KB processing-failure visibility (error-code chain + silent sub-step alerts + cross-KB failure center) 2026-06-28 13:07:34 +08:00
service feat(wiki): KB processing-failure visibility (error-code chain + silent sub-step alerts + cross-KB failure center) 2026-06-28 13:07:34 +08:00
support chore(test): backfill mateclaw-server/src/test/ that earlier PRIVATE_ITEMS pattern accidentally excluded 2026-05-12 17:38:08 +08:00
tool feat(wiki): add wiki_update_page (in-place edit) and wiki_stale_pages tools 2026-05-31 08:00:19 +08:00
WikiDomainIntegrationE2ETest.java test(wiki): cross-feature end-to-end domain scenario 2026-05-31 07:57:31 +08:00