docs(wiki): 深度审计修复记录
Some checks failed
CI / Lint & TypeCheck (push) Has been cancelled
CI / Unit Tests (push) Has been cancelled
CI / Build Frontend (push) Has been cancelled
CI / Rust Check (push) Has been cancelled
CI / Security Scan (push) Has been cancelled
CI / E2E Tests (push) Has been cancelled

This commit is contained in:
iven
2026-04-18 09:11:37 +08:00
parent 4e4eefdde1
commit 3a24455401

View File

@@ -9,6 +9,15 @@ tags: [log, history]
> Append-only 操作记录。格式: `## [日期] 类型 | 描述`
## 2026-04-18 fix | 深度审计修复 — WASM 安全 + 编译路径
- CRITICAL: zclaw_file_read 路径遍历修复 (组件级过滤)
- CRITICAL: zclaw_http_fetch SSRF 防护 (scheme 白名单 + 私有 IP 阻止)
- CRITICAL: A2A 始终编译 (移除 zclaw-protocols a2a feature gate)
- MEDIUM: FactCategory cfg(test) 导入修复
- 移除 kernel/desktop multi-agent feature (不再控制任何代码)
- 563 测试全通过
## 2026-04-17 refactor | Phase 4A multi-agent feature gate 移除
- 8 个文件移除 33 处 `#[cfg(feature = "multi-agent")]`