sileya-ai
/
vr-shopxo-plugin
1
0
Fork 0
Code Issues 3 Pull Requests Packages Projects Releases Wiki Activity
vr-shopxo-plugin/shopxo/app
History
Council 098bcfe780 fix(P0): P0-1 idempotent ticket issuance, P0-3 XSS, P0-4 QR secret exception 
P0-1: issueTicket() now checks for existing tickets by (order_id, spec_base_id)
      before inserting. Prevents duplicate tickets on HTTP retry/multi-instance.
P0-3: Removed |raw from simple_desc and content in ticket_detail.html.
      Prevents stored XSS via malicious admin content injection.
P0-4: getQrSecret() now throws exception if VR_TICKET_QR_SECRET is unset,
      instead of falling back to insecure default key.
 		2026-04-15 16:59:22 +08:00
..
admin feat: import ShopXO v6.8.0 sourcecode (vendor/runtime excluded) 2026-04-15 13:09:44 +08:00
api feat: import ShopXO v6.8.0 sourcecode (vendor/runtime excluded) 2026-04-15 13:09:44 +08:00
index feat: import ShopXO v6.8.0 sourcecode (vendor/runtime excluded) 2026-04-15 13:09:44 +08:00
install feat: import ShopXO v6.8.0 sourcecode (vendor/runtime excluded) 2026-04-15 13:09:44 +08:00
lang feat: import ShopXO v6.8.0 sourcecode (vendor/runtime excluded) 2026-04-15 13:09:44 +08:00
module feat: import ShopXO v6.8.0 sourcecode (vendor/runtime excluded) 2026-04-15 13:09:44 +08:00
plugins fix(P0): P0-1 idempotent ticket issuance, P0-3 XSS, P0-4 QR secret exception 2026-04-15 16:59:22 +08:00
route feat: import ShopXO v6.8.0 sourcecode (vendor/runtime excluded) 2026-04-15 13:09:44 +08:00
service feat: import ShopXO v6.8.0 sourcecode (vendor/runtime excluded) 2026-04-15 13:09:44 +08:00
tpl feat: import ShopXO v6.8.0 sourcecode (vendor/runtime excluded) 2026-04-15 13:09:44 +08:00
.gitignore feat: import ShopXO v6.8.0 sourcecode (vendor/runtime excluded) 2026-04-15 13:09:44 +08:00
AppService.php feat: import ShopXO v6.8.0 sourcecode (vendor/runtime excluded) 2026-04-15 13:09:44 +08:00
BaseController.php feat: import ShopXO v6.8.0 sourcecode (vendor/runtime excluded) 2026-04-15 13:09:44 +08:00
ExceptionHandle.php feat: import ShopXO v6.8.0 sourcecode (vendor/runtime excluded) 2026-04-15 13:09:44 +08:00
Request.php feat: import ShopXO v6.8.0 sourcecode (vendor/runtime excluded) 2026-04-15 13:09:44 +08:00
common.php feat: import ShopXO v6.8.0 sourcecode (vendor/runtime excluded) 2026-04-15 13:09:44 +08:00
middleware.php feat: import ShopXO v6.8.0 sourcecode (vendor/runtime excluded) 2026-04-15 13:09:44 +08:00
provider.php feat: import ShopXO v6.8.0 sourcecode (vendor/runtime excluded) 2026-04-15 13:09:44 +08:00
service.php feat: import ShopXO v6.8.0 sourcecode (vendor/runtime excluded) 2026-04-15 13:09:44 +08:00