iven
931edc3025
fix(security): 补全 XSS sanitize + 修复 sender_id 身份伪造
安全审计修复：
- 补全 6 个 DTO 的 sanitize 方法（diagnosis/consent/alert/medication_record/medication_reminder/follow_up_template）
- 4 个 handler 添加 .sanitize() 调用（diagnosis/consent/alert_rule/medication_record）
- 修复咨询消息 sender_id/sender_role 从客户端提交改为服务端从 JWT 提取
- 修复小程序 AI 报告 markdownToHtml XSS（添加 sanitizeHtml 过滤）
2026-04-30 10:21:52 +08:00
..
2026-04-24 00:28:38 +08:00
2026-04-29 15:11:05 +08:00
2026-04-29 07:29:49 +08:00
2026-04-30 10:21:52 +08:00
2026-04-26 19:16:23 +08:00
2026-04-28 00:19:52 +08:00
2026-04-28 00:19:52 +08:00
2026-04-28 00:19:52 +08:00
2026-04-24 00:28:38 +08:00
2026-04-28 00:19:52 +08:00
2026-04-28 00:19:52 +08:00
2026-04-28 00:19:52 +08:00
2026-04-28 00:19:52 +08:00
2026-04-28 00:19:52 +08:00
2026-04-27 08:20:26 +08:00
2026-04-28 00:19:52 +08:00
2026-04-24 00:28:38 +08:00
2026-04-29 04:58:01 +08:00
2026-04-29 04:58:01 +08:00
2026-04-27 08:20:12 +08:00
2026-04-28 00:19:52 +08:00
2026-04-28 00:19:52 +08:00
2026-04-28 00:19:52 +08:00
2026-04-28 00:19:52 +08:00
2026-04-28 00:19:52 +08:00
2026-04-28 00:19:52 +08:00
2026-04-28 00:19:52 +08:00
2026-04-24 00:28:38 +08:00
2026-04-28 00:19:52 +08:00
2026-04-28 00:19:52 +08:00
2026-04-28 00:19:52 +08:00
2026-04-28 00:19:52 +08:00
2026-04-28 00:19:52 +08:00
2026-04-28 00:19:52 +08:00
2026-04-28 00:19:52 +08:00