yumoqing 311753689a security: fetch_forex_rates.dspy 加 localhost 校验(定时任务入口) ...

该端点授权给 any 且无任何鉴权，会发起外网抓取(BOC 页面)并写 exchange_rate 表，
匿名可反复触发 → 外部请求放大 + 脏数据写入 + DoS。改为仅本机可调(client_ip)。
build.sh 的 crontab 本就是 curl localhost:9090，不影响定时任务。

2026-08-25 15:01:21 +08:00

..

currency_create.dspy

feat: multi-currency support — currency/exchange_rate tables + migration

2026-07-07 15:43:01 +08:00

currency_delete.dspy

feat: multi-currency support — currency/exchange_rate tables + migration

2026-07-07 15:43:01 +08:00

currency_update.dspy

feat: multi-currency support — currency/exchange_rate tables + migration

2026-07-07 15:43:01 +08:00

exchange_rate_create.dspy

feat: multi-currency support — currency/exchange_rate tables + migration

2026-07-07 15:43:01 +08:00

exchange_rate_delete.dspy

feat: multi-currency support — currency/exchange_rate tables + migration

2026-07-07 15:43:01 +08:00

exchange_rate_update.dspy

feat: multi-currency support — currency/exchange_rate tables + migration

2026-07-07 15:43:01 +08:00

fetch_forex_rates.dspy

security: fetch_forex_rates.dspy 加 localhost 校验(定时任务入口)

2026-08-25 15:01:21 +08:00