Seguridad y docs: fix SQLi en updatePost, middleware por segmentos exactos, cover-cache directo al upstream, JWT sin fallback hardcodeado, password sudo fuera de deploy/setup.sh; reescritura AGENTS.md y CLAUDE.md

2026-08-04 11:13:57 +08:00
parent 5d36c635cb
commit 451518004d
12 changed files with 419 additions and 928 deletions
@@ -75,9 +75,7 @@ export async function POST(req: NextRequest) {
      })!
    }

-    const port = process.env.PORT || "3000"
-    const proxyUrl = `http://127.0.0.1:${port}/api/proxy/galleries/${gid}/cover`
-    await cacheCover(gid, proxyUrl)
+    await cacheCover(gid)

    return Response.json({
      success: true,