Issues - NixMsg - Nixevol Gitea

Labels Milestones New Issue

[U-05][low] 目录搜索的 LIKE 通配符没有转义；端编号 inline 与 mochi 内联客户端同名 P3-low lane/identity review-2026-09-30

by nixevol was closed 2026-09-30 16:36:07 +08:00

[U-04][medium] 锁定计数表从不清理，轮换 IP 可让内存持续增长 P2-medium lane/identity review-2026-09-30

by nixevol was closed 2026-09-30 16:36:07 +08:00

[U-03][medium] 对话密码锁定不一致：按对计数键三处各不相同、锁定期内不带密码也报 rate_limited、后台改对话密码与删除端不清锁定 P2-medium lane/identity review-2026-09-30

by nixevol was closed 2026-09-30 16:36:06 +08:00

[U-02][medium] 群操作的校验不在写事务里；建群输入不去重；后台建群不校验群主 P2-medium lane/identity review-2026-09-30

by nixevol was closed 2026-09-30 16:36:05 +08:00

[U-01][high] 开启自助注册时不要求安全码，空安全码即可注册 P1-high lane/identity lane/web review-2026-09-30

by nixevol was closed 2026-09-30 16:36:05 +08:00

[B-12][medium] 认证没有超时与并发上限：argon2 排队无界、并发尝试可绕过锁定、PHC 参数写死 P2-medium lane/broker lane/identity review-2026-09-30

by nixevol was closed 2026-09-30 16:35:53 +08:00

[B-10][high] 密码校验与写库不是原子的：重置、停用、删除期间的登录、改密、退出会越过管理员操作 P1-high lane/broker lane/identity review-2026-09-30

by nixevol was closed 2026-09-30 16:35:51 +08:00