kuaifan 75073d4320 fix(ai): address security and robustness issues from code review ...

Security fixes:
- Add escapeUserInput() to prevent Prompt injection via user input
- Validate msgId belongs to dialogId in updateMessageStatus()
- Add type parameter whitelist validation in ai-apply/ai-dismiss
- Add event record validation in task__ai_dismiss

Robustness fixes:
- Use atomic update for markProcessing to prevent concurrent processing
- Add subtask count limit check before creation (max 50)
- Disable similar task feature until vector search is implemented
- Fix Promise anti-pattern in frontend actions

Generated with [Claude Code](https://claude.ai/code)
via [Happy](https://happy.engineering)

Co-Authored-By: Claude <noreply@anthropic.com>
Co-Authored-By: Happy <yesreply@happy.engineering>

2026-01-21 15:30:06 +00:00

..

js

fix(ai): address security and robustness issues from code review

2026-01-21 15:30:06 +00:00

sass

feat(ai): display AI assistant avatar for userid=-1

2026-01-21 15:30:06 +00:00

statics

style: 统一 webTab 主题配色风格

2026-01-14 11:50:15 +08:00