linxianzhuang/saasshop
0
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Admin dashboard: billing entry links carry safe back

Browse Source
This commit is contained in:
萝卜
2026-03-15 00:53:14 +00:00
parent 84946db852
commit 85a3189e81
2 changed files with 46 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files

12
resources/views/admin/dashboard.blade.php
View File

@@ -8,6 +8,12 @@
$incomingBack = (string) request()->query('back', '');
$safeBackForLinks = \App\Support\BackUrl::sanitizeForLinks($incomingBack);
$billingEntryLinks = [
'platform_orders' => \App\Support\BackUrl::withBack('/admin/platform-orders', $safeBackForLinks),
'site_subscriptions' => \App\Support\BackUrl::withBack('/admin/site-subscriptions', $safeBackForLinks),
'plans' => \App\Support\BackUrl::withBack('/admin/plans', $safeBackForLinks),
];
$platformOrdersQuickLinks = [
'unpaid_pending' => \App\Support\BackUrl::withBack('/admin/platform-orders?payment_status=unpaid&status=pending', $safeBackForLinks),
'paid_pending' => \App\Support\BackUrl::withBack('/admin/platform-orders?payment_status=paid&status=pending', $safeBackForLinks),
@@ -39,9 +45,9 @@
<div class="muted">聚焦收费闭环的日常治理入口：订单 → 订阅 → 套餐。</div>
<div class="actions mt-12">
<a class="btn" href="/admin/platform-orders">进入平台订单</a>
<a class="btn btn-secondary" href="/admin/site-subscriptions">进入订阅管理</a>
<a class="btn btn-secondary" href="/admin/plans">进入套餐管理</a>
<a class="btn" href="{!! $billingEntryLinks['platform_orders'] !!}">进入平台订单</a>
<a class="btn btn-secondary" href="{!! $billingEntryLinks['site_subscriptions'] !!}">进入订阅管理</a>
<a class="btn btn-secondary" href="{!! $billingEntryLinks['plans'] !!}">进入套餐管理</a>
</div>
<div class="mt-12">

37
tests/Feature/AdminDashboardBillingWorkbenchLinksCarrySafeBackTest.php Normal file
View File

@@ -0,0 +1,37 @@
<?php
namespace Tests\Feature;
use Illuminate\Foundation\Testing\RefreshDatabase;
use Tests\TestCase;
class AdminDashboardBillingWorkbenchLinksCarrySafeBackTest extends TestCase
{
use RefreshDatabase;
protected function loginAsPlatformAdmin(): void
{
$this->seed();
$this->post('/admin/login', [
'email' => 'platform.admin@demo.local',
'password' => 'Platform@123456',
])->assertRedirect('/admin');
}
public function test_dashboard_billing_workbench_entry_links_should_carry_safe_back_and_not_escape_ampersand(): void
{
$this->loginAsPlatformAdmin();
$res = $this->get('/admin?back=' . urlencode('/admin/plans?status=active'));
$res->assertOk();
$res->assertSee('收费工作台');
$res->assertSee('href="/admin/platform-orders?back=%2Fadmin%2Fplans%3Fstatus%3Dactive"', false);
$res->assertSee('href="/admin/site-subscriptions?back=%2Fadmin%2Fplans%3Fstatus%3Dactive"', false);
$res->assertSee('href="/admin/plans?back=%2Fadmin%2Fplans%3Fstatus%3Dactive"', false);
$res->assertDontSee('&amp;back=', false);
}
}