Files
GovAI/.gitignore
T
selfrelease a3245b249a security: 安全审计修复 - API Key清理 + JWT改为HttpOnly Cookie
- API Key: run.md/.env/seed_model_providers.sql 中明文Key替换为占位符
- 认证: JWT从localStorage迁移到HttpOnly Cookie,移除后端body返回token
- 前端: api.ts/knowledge/page.tsx/auth.ts 全面改用Cookie认证
- postcss XSS: package.json添加overrides强制升级到8.5.15
- gitignore: 添加server/.env和.env排除规则
- lint: 移除tenant.go中未使用的roleKey常量
- 文档: 新增docs/security-audit-report.md和hardware-requirements.md
2026-06-26 10:44:04 +08:00

75 lines
872 B
Plaintext

# ===== Environment =====
# .env 和 server/.env 包含密钥,不得纳入版本控制
.env
.env.local
server/.env
server/.env.local
!.env.example
!.server/.env.example
# ===== Go =====
server/server
server/server-*
server/tmp/
server/bin/
server/cmd/test-*/
*.exe
*.exe~
*.dll
*.so
*.dylib
*.test
*.out
vendor/
# ===== Node.js / Next.js =====
node_modules/
apps/web/.next/
apps/web/out/
.turbo/
.vercel/
# ===== IDE =====
.idea/
.vscode/
*.swp
*.swo
*~
# ===== OS =====
.DS_Store
Thumbs.db
# ===== Docker =====
pgdata/
redisdata/
miniodata/
caddydata/
dify-data/
# ===== Build =====
dist/
build/
*.log
# ===== Secrets =====
*.pem
*.key
credentials.json
# ===== Playwright MCP (临时文件) =====
.playwright-mcp/
# ===== Demo & 截图 =====
demo-screenshots*/
demo-*.mp4
# ===== Python =====
__pycache__/
*.pyc
venv/
.venv/
# ===== AI/IDE =====
.ai-switch/