xfy 60c51f44ab fix(posts): move rebuild SELECT into transaction with FOR UPDATE ...

Review 发现：SELECT 在事务外读 rows，事务内 UPDATE 时若并发编辑了该 post，
会用旧 content_md 覆盖新内容（非可重复读）。改为 SELECT 移入事务并加
FOR UPDATE，锁住待处理行直到 UPDATE 完成，消除丢失更新。

权衡：FOR UPDATE 锁最多 500 行直到事务结束，阻塞并发编辑；rebuild 是 admin
运维操作，可接受。

2026-06-18 14:17:20 +08:00

..

api

fix(posts): move rebuild SELECT into transaction with FOR UPDATE

2026-06-18 14:17:20 +08:00

auth

refactor: replace server-only dead_code allows with cfg(feature = "server")

2026-06-16 16:45:08 +08:00

bin

fix(minify): preserve Dioxus hydration markers and remove unsafe per-URL cache

2026-06-17 10:43:09 +08:00

components

feat(cache): add PostListItem DTO and use it in list/tag/search caches

2026-06-17 15:51:19 +08:00

db

perf(db): add statement_timeout; skip retry on pool Timeout errors

2026-06-18 13:35:33 +08:00

hooks

docs(hooks, theme): 补充中文注释

2026-06-12 19:07:43 +08:00

models

feat(session): invalidate all sessions on role/status change via generation

2026-06-18 13:26:09 +08:00

pages

perf(posts): add optional pagination to get_posts_by_tag, fix total count

2026-06-18 11:14:56 +08:00

tasks

refactor(tasks): use named constants for MB and hours in cleanup

2026-06-18 10:11:07 +08:00

utils

refactor(utils): extract reading_time helper

2026-06-17 16:25:22 +08:00

cache.rs

feat(session): invalidate all sessions on role/status change via generation

2026-06-18 13:26:09 +08:00

context.rs

docs(infra): 补充中文注释

2026-06-12 19:02:37 +08:00

highlight.rs

fix(highlight): 大小写不敏感的语法名称匹配，修复 haskell 等高亮失效

2026-06-16 16:20:21 +08:00

main.rs

feat(security): add Origin-based CSRF protection for write endpoints

2026-06-18 13:22:59 +08:00

router.rs

feat(ui): 新增 /admin/trash 回收站管理页面与导航

2026-06-16 12:38:41 +08:00

ssr_cache.rs

refactor(ssr): remove unused per-slug/per-tag generation counters

2026-06-18 10:30:07 +08:00

theme.rs

security: fix critical issues from repository review

2026-06-17 10:34:14 +08:00

webp.rs

test: 移除脆弱断言与凑数测试（review 修正）

2026-06-15 11:26:24 +08:00