fix(wechat): trust configured imgproxy generated images #20

Merged
tkmind merged 1 commits from codex/wechat-generated-image-origin-fix-20260721 into main 2026-07-22 01:10:47 +00:00
Owner

生产验收发现服务号生成图片使用 IMGPROXY_BASE_URL(img.tkmind.cn),原上传校验只信任 H5_PUBLIC_BASE_URL(m.tkmind.cn)。本修复将 H5 公网域名、IMGPROXY_BASE_URL 和显式附加白名单合并为可信图片源,并继续拒绝未知外域。\n\n验证:定向测试、npm test、npm run build、MindSpace publish/page-sync/H5 session 回归守卫、service-account isolation、git diff --check 全部通过。

生产验收发现服务号生成图片使用 IMGPROXY_BASE_URL(img.tkmind.cn),原上传校验只信任 H5_PUBLIC_BASE_URL(m.tkmind.cn)。本修复将 H5 公网域名、IMGPROXY_BASE_URL 和显式附加白名单合并为可信图片源,并继续拒绝未知外域。\n\n验证:定向测试、npm test、npm run build、MindSpace publish/page-sync/H5 session 回归守卫、service-account isolation、git diff --check 全部通过。
Author
Owner

CI 1079 在 runner 的 Check out exact commit 阶段中断,日志未进入安装、测试或构建;本地完整验证均通过。重触发同一代码树 CI,等待完整绿灯后再合并。

CI 1079 在 runner 的 Check out exact commit 阶段中断,日志未进入安装、测试或构建;本地完整验证均通过。重触发同一代码树 CI,等待完整绿灯后再合并。
tkmind added 1 commit 2026-07-22 01:06:21 +00:00
fix(wechat): trust configured imgproxy generated images
Memind CI / Test, build, and release guards (pull_request) Successful in 2m56s
c6ae7cd21c
tkmind force-pushed codex/wechat-generated-image-origin-fix-20260721 from 60a45c1c59 to c6ae7cd21c 2026-07-22 01:06:21 +00:00 Compare
tkmind merged commit aafda0cf64 into main 2026-07-22 01:10:47 +00:00
Sign in to join this conversation.
No Reviewers
No Label
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: tkmind/memind#20