kuaifan 75073d4320 fix(ai): address security and robustness issues from code review ...

Security fixes:
- Add escapeUserInput() to prevent Prompt injection via user input
- Validate msgId belongs to dialogId in updateMessageStatus()
- Add type parameter whitelist validation in ai-apply/ai-dismiss
- Add event record validation in task__ai_dismiss

Robustness fixes:
- Use atomic update for markProcessing to prevent concurrent processing
- Add subtask count limit check before creation (max 50)
- Disable similar task feature until vector search is implemented
- Fix Promise anti-pattern in frontend actions

Generated with [Claude Code](https://claude.ai/code)
via [Happy](https://happy.engineering)

Co-Authored-By: Claude <noreply@anthropic.com>
Co-Authored-By: Happy <yesreply@happy.engineering>

2026-01-21 15:30:06 +00:00

..

assets

fix(ai): address security and robustness issues from code review

2026-01-21 15:30:06 +00:00

drawio @ acd938b1e4

perf: Upgrade drawio

2024-12-07 01:31:49 +08:00

mobile @ 4e8ee678b3

no message

2026-01-16 00:20:52 +08:00

views

feat: 优化开发环境配置

2025-10-16 23:56:48 +00:00