Repository navigation

fix: 修補班表分享連結 stored XSS 漏洞，PDF 加密改用 Root Key 自動輪替 - #21

Merged

Cody8722 merged 5 commits into

Sep 7, 2026

Merged

fix: 修補班表分享連結 stored XSS 漏洞，PDF 加密改用 Root Key 自動輪替#21
Cody8722 merged 5 commits into
releasefrom
develop

Commits on Sep 7, 2026
- feat: PDF 隱藏資料加密改用 Root Key + HKDF 版本衍生，支援金鑰輪替
  
  Cody8722
  and
  claude
  committed
  d546146
- feat: PDF 加密金鑰版本改為每 30 天自動輪替（DB 為真相來源）
  
  Cody8722
  and
  claude
  committed
  d1c7146
- chore: 忽略前端 build 產物 frontend/dist/
  
  Cody8722
  and
  claude
  committed
  cfcc99a
- fix: 修補班表分享連結可被串接成 stored XSS 的漏洞
  
  Cody8722
  and
  claude
  committed
  b8a2d1e
- fix: escapeHtml 型別繞過漏洞，補上前一版 XSS 修補的遺漏路徑
  
  Cody8722
  and
  claude
  committed
  37e3913