kate522
ff4ec1eb43
- 统一验证入口 aksrt_require_captcha()，返回 true|WP_Error，启用场景配置缺失时 fail-closed 拒绝 - 前端公共 API 重构为 window.AKSRTCaptcha（verify/collect/reset/run），单飞锁防并发重复验证，一次性 proof 绑定浏览器 cookie+场景+服务商+主机名 - challenge/exchange REST 端点：challenge 原子占用防票据放大厂商调用，增加频率限制 - 新增 OAuth bind pass：服务端签发 5 分钟一次性令牌，绑定用户+服务商+浏览器，微信扫码延迟消费 - 覆盖场景：评论、登录、注册、绑定第三方、绑定手机、找回密码、修改密码、更改邮箱、资料下载、签到、前台投稿 - 移除 Service 层重复验证与 _auth_code_verified/_defer_login 等客户端可伪造标志，删除下载共享 pass 死代码 - 修复腾讯 TC3 签名 scope、Cloudflare action/cdata/hostname 严格校验、阿里云验签错误码映射 - 后台 Schema 保存对 secret 字段做掩码/保留合并；导入导出过滤 aksrt_captcha_config - 重建 public bundle 与 admin SPA；新增 captcha 运行时/安全/业务契约测试与 harness
81 lines
2.7 KiB
Plaintext
81 lines
2.7 KiB
Plaintext
# Repository metadata and local agent workspaces
|
|
/.git/
|
|
/.claude/
|
|
/.compare/
|
|
|
|
# Project planning, internal docs, and local-only development files
|
|
/.specs/
|
|
/docs/
|
|
/tools/*
|
|
!/tools/build-public-assets.mjs
|
|
/tests/*
|
|
!/tools/wp-cli-visual-fixtures.php
|
|
!/tests/fixtures/
|
|
!/tests/visual/
|
|
/tests/fixtures/*
|
|
!/tests/fixtures/page-visual-matrix-v1.json
|
|
!/tests/widget-system/
|
|
/tests/widget-system/*
|
|
!/tests/widget-system/post-editor-reference-contract.test.cjs
|
|
!/tests/widget-system/post-visual-contract.test.cjs
|
|
!/tests/widget-system/lazyload-contract.test.cjs
|
|
!/tests/widget-system/toast-contract.test.cjs
|
|
!/tests/widget-system/page-display-contract.test.cjs
|
|
!/tests/widget-system/icon-card-contract.test.cjs
|
|
!/tests/widget-system/page-display-save-harness.php
|
|
!/tests/widget-system/admin-ui-contract.test.cjs
|
|
!/tests/widget-system/auth-source-contract.test.cjs
|
|
!/tests/widget-system/captcha-business-contract.test.cjs
|
|
!/tests/widget-system/captcha-security-harness.php
|
|
!/tests/widget-system/captcha-runtime-harness.test.cjs
|
|
!/tests/widget-system/oauth-security-contract.test.cjs
|
|
!/tests/widget-system/oauth-security-harness.php
|
|
!/tests/widget-system/user-badges-contract.test.cjs
|
|
!/tests/widget-system/user-features-contract.test.cjs
|
|
!/tests/widget-system/zibll-modern-widgets-contract.test.cjs
|
|
!/tests/widget-system/user-card-runtime-contract.test.cjs
|
|
!/tests/widget-system/user-card-runtime-harness.php
|
|
!/tests/widget-system/notification-preferences-contract.test.cjs
|
|
!/tests/widget-system/message-center-contract.test.cjs
|
|
!/tests/widget-system/message-center-url-harness.php
|
|
!/tests/widget-system/message-center-pagination-harness.php
|
|
!/tests/widget-system/asset-ledger-contract.test.cjs
|
|
!/tests/widget-system/financial-flow-contract.test.cjs
|
|
!/tests/widget-system/pay-orders-filter-contract.test.cjs
|
|
!/tests/widget-system/front-submit-editor-contract.test.cjs
|
|
!/tests/widget-system/comment-smilies-removal-contract.test.cjs
|
|
!/tests/widget-system/comment-children-list-reset-contract.test.cjs
|
|
!/tests/widget-system/pay-card-contract.test.cjs
|
|
!/tests/widget-system/circular-button-icon-margin-contract.test.cjs
|
|
!/tests/asset-ledger/
|
|
!/tests/asset-ledger/*.php
|
|
!/tests/visual/docker-compose.zibll.yml
|
|
!/tests/visual/zibll-Caddyfile
|
|
!/tests/visual/README.md
|
|
/CLAUDE.md
|
|
/AGENTS.md
|
|
ask-*.md
|
|
!assets/css/routes/docs/
|
|
assets/css/routes/docs/*
|
|
!assets/css/routes/docs/toolbar-search-enhancements.css
|
|
|
|
# Frontend build output and installed dependencies
|
|
/assets/admin/build/*
|
|
!/assets/admin/build/.gitkeep
|
|
/assets/admin/node_modules/*
|
|
!/assets/admin/node_modules/.gitkeep
|
|
assets/admin/.vite-temp/
|
|
|
|
# PHP installed dependencies
|
|
/vendor/*
|
|
!/vendor/.gitkeep
|
|
|
|
# Temporary / recovery helpers
|
|
restore-helper-monoliths.php
|
|
/.phpunit.cache/
|
|
|
|
# OS / editor noise
|
|
.DS_Store
|
|
Thumbs.db
|
|
*.log
|