mirror of
https://github.com/NanmiCoder/cc-haha
synced 2026-07-27 15:13:37 +08:00
4fbf567874
HIGH fixes: - Complete SSRF protection: add IPv6 private (fc00::, fe80::), IPv4-mapped IPv6 (::ffff:10.x), and 0.0.0.0 to blocklist - Validate provider baseUrl against private IP ranges at load time - Extract shared validateUrlSafety() for reuse MEDIUM fixes: - Skip unchanged masked sensitive fields on save (prevent '********' from overwriting real API keys) - Filter POST /api/plugins/options to only schema-declared keys - Whitelist img src to http/https/data protocols only - Improve model capabilities matching: exact → prefix → contains - Cache providers at startup instead of per-tool-call Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>
Code Council Desktop
基于 Tauri 2 + React 的 Code Council 桌面客户端。
开发
bun install
bun run tauri dev
构建
# macOS (Apple Silicon)
./scripts/build-macos-arm64.sh
# Windows (x64, MSI only)
.\scripts\build-windows-x64.ps1
构建产物位于 build-artifacts/ 目录，文件名会显式包含平台、架构和包类型。
常见问题
macOS 提示"已损坏，无法打开"
xattr -cr /Applications/Claude\ Code\ Haha.app