iven/hms - hms - 汕头市智界科技有限公司

iven/hms

Fork 0

Commit Graph

Author	SHA1	Message	Date
iven	931edc3025	fix(security): 补全 XSS sanitize + 修复 sender_id 身份伪造安全审计修复： - 补全 6 个 DTO 的 sanitize 方法（diagnosis/consent/alert/medication_record/medication_reminder/follow_up_template） - 4 个 handler 添加 .sanitize() 调用（diagnosis/consent/alert_rule/medication_record） - 修复咨询消息 sender_id/sender_role 从客户端提交改为服务端从 JWT 提取 - 修复小程序 AI 报告 markdownToHtml XSS（添加 sanitizeHtml 过滤）	2026-04-30 10:21:52 +08:00
iven	b4735213c5	feat(health): Phase 1 业务改进 — 诊断编码/统计API/体征表合并/积分修复 Some checks failed CI / rust-check (push) Has been cancelled Details CI / rust-test (push) Has been cancelled Details CI / frontend-build (push) Has been cancelled Details CI / security-audit (push) Has been cancelled Details 1.1 Dashboard 统计: 新增 3 个统计端点 (patient/consultation/follow-up) 1.2 事件发布: follow_up.overdue + health_data.critical_alert 事件 1.3 体征表合并: vital_signs 添加 source 列, daily_monitoring 委托写入 1.4 实时预警: 创建体征时检测血压/心率/血糖异常并发布事件 1.5 诊断编码: 新建 diagnosis entity/service/handler + ICD-10 支持 1.6 积分过期: expire_points 定时任务 + 修复 r#type 列名问题修复: points_transaction.r#type → transaction_type 列重命名修复: consultation_message.sender_type → sender_role SQL 列名前端: 3 个统计 API 从伪实现改为真实调用	2026-04-26 00:54:56 +08:00

Author

SHA1

Message

Date

iven

931edc3025

fix(security): 补全 XSS sanitize + 修复 sender_id 身份伪造

安全审计修复：
- 补全 6 个 DTO 的 sanitize 方法（diagnosis/consent/alert/medication_record/medication_reminder/follow_up_template）
- 4 个 handler 添加 .sanitize() 调用（diagnosis/consent/alert_rule/medication_record）
- 修复咨询消息 sender_id/sender_role 从客户端提交改为服务端从 JWT 提取
- 修复小程序 AI 报告 markdownToHtml XSS（添加 sanitizeHtml 过滤）

2026-04-30 10:21:52 +08:00

iven

b4735213c5

feat(health): Phase 1 业务改进 — 诊断编码/统计API/体征表合并/积分修复

CI / rust-check (push) Has been cancelled

Details

CI / rust-test (push) Has been cancelled

Details

CI / frontend-build (push) Has been cancelled

Details

CI / security-audit (push) Has been cancelled

Details

1.1 Dashboard 统计: 新增 3 个统计端点 (patient/consultation/follow-up)
1.2 事件发布: follow_up.overdue + health_data.critical_alert 事件
1.3 体征表合并: vital_signs 添加 source 列, daily_monitoring 委托写入
1.4 实时预警: 创建体征时检测血压/心率/血糖异常并发布事件
1.5 诊断编码: 新建 diagnosis entity/service/handler + ICD-10 支持
1.6 积分过期: expire_points 定时任务 + 修复 r#type 列名问题

修复: points_transaction.r#type → transaction_type 列重命名
修复: consultation_message.sender_type → sender_role SQL 列名
前端: 3 个统计 API 从伪实现改为真实调用

2026-04-26 00:54:56 +08:00

2 Commits