Commit Graph

17 Commits

Author SHA1 Message Date
萝卜
cbc05e59b7 BackUrl::sanitizeForLinks 增强:拒绝控制字符与 CRLF 注入 并补单测 2026-03-15 04:17:10 +00:00
萝卜
e86257e866 BackUrl::sanitizeForLinks 加强:拒绝二次编码 back%3D 绕过 并补单测 2026-03-15 04:11:42 +00:00
萝卜
c81c5a1f39 PlatformOrder: add orderTypeLabel helper 2026-03-15 01:40:09 +00:00
萝卜
d916c6a4b3 Test: add unit coverage for BackUrl::sanitizeForLinks 2026-03-15 01:33:04 +00:00
萝卜
ffc88feede fix(backurl): avoid double fragment in withBackFirstAndFragment 2026-03-14 21:51:17 +00:00
萝卜
ee85e63340 fix(backurl): avoid double fragment when using withBackAndFragment 2026-03-14 21:33:32 +00:00
萝卜
4e741b92a1 security(backurl): re-sanitize back inside helpers 2026-03-14 21:27:52 +00:00
萝卜
9920967449 feat(backurl): support fragment in input path safely 2026-03-14 21:22:43 +00:00
萝卜
e854d94578 feat(backurl): preserve existing fragment when appending back 2026-03-14 21:20:26 +00:00
萝卜
84e860e403 fix(backurl): avoid duplicating back query when already present 2026-03-14 21:17:02 +00:00
萝卜
ec7db058a1 test(backurl): cover query edge cases and back-first behavior 2026-03-14 21:04:53 +00:00
萝卜
6f1b894b45 统一退款不一致(refund_inconsistent)口径:引入 amounts.tolerance 并对齐模型与筛选 2026-03-13 15:51:26 +00:00
萝卜
12b99b575b Add unit test for reconcile mismatch when no receipt evidence 2026-03-13 11:53:56 +00:00
萝卜
a1ae7caf88 feat: add PlatformOrder isReconcileMismatch and reuse in subscription summary 2026-03-11 06:57:25 +00:00
萝卜
b4f1e194f6 refactor: centralize receipt total logic on PlatformOrder 2026-03-11 06:41:36 +00:00
萝卜
fb4d1fb99e refactor: centralize refund total and refund inconsistent logic on PlatformOrder 2026-03-11 06:25:43 +00:00
萝卜
50f15cdea8 chore: init saasshop repo + sql migrations runner + gitee go 2026-03-10 11:31:02 +00:00