你的姓名 4c128e0764 fix(plugins): address code review findings for image-gen plugin ...

HIGH fixes:
- SSRF protection: block private/link-local IPs and file:// URLs
  in edit_image image_url parameter
- Mask sensitive values in GET /api/plugins/options response

MEDIUM fixes:
- Clamp n parameter to 1-10 to prevent API bill exhaustion
- Validate prompt is non-empty string before API call
- Return empty array when no providers configured (clear error)
- Add 1MB buffer limit for JSON-RPC line accumulation
- Fix PluginConfigModal useEffect re-fetch loop on parent re-render

LOW fixes:
- Remove unused requestId variable

Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>

2026-06-14 13:00:44 +08:00

..

.claude-plugin

feat(plugins): add image-gen MCP plugin with multi-provider fallback

2026-06-14 12:56:34 +08:00

image-gen

fix(plugins): address code review findings for image-gen plugin

2026-06-14 13:00:44 +08:00

reverse-engineering

feat(reverse-engineering): APK hardening skill + shell-driven workflow refactor

2026-06-13 05:11:14 +08:00