mirror of https://github.com/AstrBotDevs/AstrBot synced 2026-07-18 18:10:37 +08:00

Files

LIghtJUNction bae7ec410c fix(dashboard): patch bundled DOMPurify to fix XSS vulnerability

monaco-editor@0.55.1 hardcodes dompurify@3.2.7 (vulnerable to SAFE_FOR_XML
bypass via rawtext elements). Added postinstall script that downloads the
patched 3.3.3 source and replaces the bundled file in node_modules.

Also keeps dompurify override at 3.3.2 for the npm package.

2026-03-28 12:40:02 +08:00

public

恢复分支

2026-02-27 22:20:38 +08:00

scripts

fix(dashboard): patch bundled DOMPurify to fix XSS vulnerability

2026-03-28 12:40:02 +08:00

src

fix(dashboard): remove Authorization header and withCredentials from SSE connections

2026-03-28 12:27:52 +08:00

tests

fix(provider): filter abort_signal from payloads to avoid JSON serialize error

2026-03-28 01:15:21 +08:00

.env.development

fix: support github pages base path config (#6608 )

2026-03-19 16:03:52 +08:00

.env.production

fix: support github pages base path config (#6608 )

2026-03-19 16:03:52 +08:00

.eslintrc.cjs

feat: update dashboard

2026-03-18 20:12:22 +08:00

.gitignore

feat: reduce default max_agent_step to 3 and refactor shell execution

2026-03-21 23:47:43 +08:00

env.d.ts

fix: support github pages base path config (#6608 )

2026-03-19 16:03:52 +08:00

eslint.config.js

fix(provider): filter abort_signal from payloads to avoid JSON serialize error

2026-03-28 01:15:21 +08:00

index.html

feat: enhance chat interface and mobile responsiveness (#5635 )

2026-03-02 12:26:55 +08:00

LICENSE

…

package.json

fix(dashboard): patch bundled DOMPurify to fix XSS vulnerability

2026-03-28 12:40:02 +08:00

pnpm-lock.yaml

fix(dashboard): resolve npm security alerts via dependency upgrades

2026-03-26 21:46:34 +08:00

README.md

同步主分支 (#5533 )

2026-02-27 22:03:17 +08:00

tsconfig.eslint.json

feat: update dashboard

2026-03-18 20:12:22 +08:00

tsconfig.json

fix(dashboard): resolve npm security alerts via dependency upgrades

2026-03-26 21:46:34 +08:00

tsconfig.vite-config.json

chore: cloudflare

2026-03-21 17:35:30 +08:00

vite.config.mts

chore: cloudflare

2026-03-21 17:35:30 +08:00

README.md

AstrBot 管理面板

基于 CodedThemes/Berry 模板开发。

环境变量

VITE_ASTRBOT_RELEASE_BASE_URL（可选）
- 默认值：https://github.com/AstrBotDevs/AstrBot/releases
- 用途：管理面板内“更新到最新版本”外部跳转所使用的 release 基地址。集成方可按需覆盖（例如 Desktop 指向其自身发布页）。
- 建议传入仓库的 .../releases 基地址（不带 /latest）。