xfy 60c51f44ab fix(posts): move rebuild SELECT into transaction with FOR UPDATE ...

Review 发现：SELECT 在事务外读 rows，事务内 UPDATE 时若并发编辑了该 post，
会用旧 content_md 覆盖新内容（非可重复读）。改为 SELECT 移入事务并加
FOR UPDATE，锁住待处理行直到 UPDATE 完成，消除丢失更新。

权衡：FOR UPDATE 锁最多 500 行直到事务结束，阻塞并发编辑；rebuild 是 admin
运维操作，可接受。

2026-06-18 14:17:20 +08:00

..

comments

fix(comments): use advisory lock to fully eliminate concurrent duplicate submissions

2026-06-18 14:15:19 +08:00

posts

fix(posts): move rebuild SELECT into transaction with FOR UPDATE

2026-06-18 14:17:20 +08:00

auth.rs

fix(auth): run dummy Argon2 verify for non-existent users to prevent timing enumeration

2026-06-18 13:29:55 +08:00

csrf.rs

style(csrf): replace redundant closures with function references (clippy)

2026-06-18 13:45:32 +08:00

error.rs

security: fix critical issues from repository review

2026-06-17 10:34:14 +08:00

image.rs

fix(image): write disk cache atomically via temp-file + rename

2026-06-18 13:40:48 +08:00

markdown.rs

refactor(markdown): unify parser options across TOC and HTML passes

2026-06-18 11:16:58 +08:00

mod.rs

feat(security): add Origin-based CSRF protection for write endpoints

2026-06-18 13:22:59 +08:00

rate_limit.rs

perf(rate-limit): use lenient bucket when client IP is unknown

2026-06-18 11:28:06 +08:00

sanitizer.rs

perf(sanitizer): staticize allowlists with LazyLock to avoid per-call allocation

2026-06-18 11:23:30 +08:00

settings.rs

refactor: 清理 clippy 提示（unwrap_or 与宏 deprecated 放行）

2026-06-16 12:40:43 +08:00

slug.rs

security: fix critical issues from repository review

2026-06-17 10:34:14 +08:00

upload.rs

perf(upload): offload GIF/WebP raw image validation to spawn_blocking

2026-06-18 11:19:34 +08:00