Evan Hu 205cafa4f5 fix(skin): @import 剥离只匹配真正的 at-rule；补转义绕过的不变量说明与用例 ...

自查时发现的两处。

**@import 匹配过宽会损坏合法皮肤。** 此前在任意位置匹配 `@import`，于是 `.a{content:"@import //x";color:red}` 会被从 `@` 切到该声明的分号，留下一个未闭合的字符串和一份坏掉的样式表——为了保护皮肤反而弄坏了一个本来没问题的皮肤。改成只在 at-rule 能出现的位置匹配：样式表开头，或 `;` / `}` 之后；并要求关键字后面不是字母数字，避免 `@importantthing` 被当成 `@import`。

**CSS 转义不是漏洞，但原因不显然，值得钉死。** 样式表可以写 `url("https:\/\/host/x.png")`，浏览器解转义后得到一个可用的远程 URL，而字面文本里没有 `://`，分类器给出的是 Embed 而不是 Drop。这是安全的，但安全性来自 Embed 能产出什么：要么把文件内联成 data: 负载，要么回退到 candidate-skins 虚拟主机下的 URL，两者都无法命名皮肤作者选定的 origin。转义过的 `..` 同理——它以字面转义文本的形式进入文件系统查找，不会穿越，也永远不会被写回文档。

也就是说，真正保护候选窗的不变量是「Embed 永不产出攻击者命名的 origin」，而不是「Drop 拦住了远程 URL 的每一种写法」。把这条写进头文件，并补一个用例钉住「转义写法永远不落到 Keep」——将来若有人改动 Embed 的回退逻辑让它原样输出 URL，这个洞会重新打开，用例会先失败。

本机以 -Wall -Wextra -Wpedantic -Werror + ASan/UBSan 编译运行 8/8 通过，portable 目标经 CMake + ctest 验证，clang-format 干净。

2026-09-06 19:33:39 +09:00

..

main.cpp

Add tests

2026-06-20 22:11:00 +08:00

test_active_client_state.cpp

style: 用 .clang-format 重排 server / windows / ui / log

2026-09-06 12:13:47 +09:00

test_async_request_origin.cpp

refactor(server): carry engine online queries through asynchronous candidate tasks

2026-09-06 13:24:03 +09:00

test_candidate_size_estimator.cpp

Render the candidate window with D2D instead of WebView2

2026-09-02 15:30:03 +08:00

test_candidate_text_policy.cpp

style: 用 .clang-format 重排 server / windows / ui / log

2026-09-06 12:13:47 +09:00

test_candidate_ui_action_policy.cpp

Fix the issue where the candidate window cannot be pulled up when switching back from Microsoft's emoji panel, and deeply optimize the stability of IPC connections.

2026-07-16 21:41:09 +08:00

test_candidate_ui_owner.cpp

Fix the issue where the candidate window cannot be pulled up when switching back from Microsoft's emoji panel, and deeply optimize the stability of IPC connections.

2026-07-16 21:41:09 +08:00

test_candidate_ui_state.cpp

style: 用 .clang-format 重排 server / windows / ui / log

2026-09-06 12:13:47 +09:00

test_candidate_view_model.cpp

refactor(session): use shared composition and local queries with one candidate view model

2026-09-06 00:26:38 +09:00

test_candidate_window_template.cpp

style: 用 .clang-format 重排 server / windows / ui / log

2026-09-06 12:13:47 +09:00

test_config_template_merge.cpp

style: 用 .clang-format 重排 server / windows / ui / log

2026-09-06 12:13:47 +09:00

test_custom_translation.cpp

Add support for the DeepLX translation service.

2026-08-30 15:39:02 +08:00

test_date_time_query.cpp

style: 用 .clang-format 重排 server / windows / ui / log

2026-09-06 12:13:47 +09:00

test_default_config_credentials.cpp

fix(server): 出厂配置的占位凭据不再被当作真凭据

2026-09-06 11:56:11 +09:00

test_dictionary_validation.cpp

Further standardize the issue of batch importing dictionaries.

2026-08-25 11:58:33 +08:00

test_emoji_query.cpp

style: 用 .clang-format 重排 server / windows / ui / log

2026-09-06 12:13:47 +09:00

test_engine_shuangpin_session.cpp

Merge remote-tracking branch 'origin/main' into pr184-merge

2026-09-06 15:31:05 +09:00

test_english_dictionary.cpp

style: 用 .clang-format 重排 server / windows / ui / log

2026-09-06 12:13:47 +09:00

test_floating_toolbar_visibility_policy.cpp

Add date-time quick input (T-mode) feature, strengthen installation to not overwrite user's config.toml, and add a cold-start protection for FTB that "displays within the page ready / up to 6s grace period, then shows/hides according to actual status" (still rebuilds webview2 on upgrade).

2026-08-08 12:37:24 +08:00

test_inline_protocol.cpp

style: 用 .clang-format 重排 server / windows / ui / log

2026-09-06 12:13:47 +09:00

test_input_key_policy.cpp

Add a function that commits the raw string when the Enter key is pressed and records the string into the dictionary.

2026-08-25 19:05:25 +08:00

test_ipc_protocol_constants.cpp

fix: 修复审计发现的候选页竞态、管道权限、TSF 空指针与皮肤 CSS 逃逸等八项缺陷 (#169)

2026-09-06 10:31:48 +09:00

test_japanese_romaji.cpp

style: 用 .clang-format 重排 server / windows / ui / log

2026-09-06 12:13:47 +09:00

test_jianpin_query.cpp

style: 用 .clang-format 重排 server / windows / ui / log

2026-09-06 12:13:47 +09:00

test_kaomoji_query.cpp

style: 用 .clang-format 重排 server / windows / ui / log

2026-09-06 12:13:47 +09:00

test_kaomoji_sql.cpp

style: 用 .clang-format 重排 server / windows / ui / log

2026-09-06 12:13:47 +09:00

test_outbound_session_state.cpp

Fix the issue where the candidate window cannot be pulled up when switching back from Microsoft's emoji panel, and deeply optimize the stability of IPC connections.

2026-07-16 21:41:09 +08:00

test_pipe_write_policy.cpp

Fix the issue where the candidate window cannot be pulled up when switching back from Microsoft's emoji panel, and deeply optimize the stability of IPC connections.

2026-07-16 21:41:09 +08:00

test_quanpin_scheme.cpp

style: 用 .clang-format 重排 server / windows / ui / log

2026-09-06 12:13:47 +09:00

test_settings_performance.cpp

style: 用 .clang-format 重排 server / windows / ui / log

2026-09-06 12:13:47 +09:00

test_shuangpin_query.cpp

Do not segmentation for help code part.

2026-08-16 03:04:02 +08:00

test_shuangpin_scheme.cpp

Fix kei missing in shuangpin.

2026-09-02 16:40:46 +08:00

test_skin_css_policy.cpp

fix(skin): @import 剥离只匹配真正的 at-rule；补转义绕过的不变量说明与用例

2026-09-06 19:33:39 +09:00

test_system_font_family.cpp

Fix: 仓耳今楷 now is supported in cand wnd and settings wnd preview.

2026-08-01 15:33:00 +08:00

test_terminal_deactivation_policy.cpp

style: 用 .clang-format 重排 server / windows / ui / log

2026-09-06 12:13:47 +09:00

test_translation_gloss.cpp

Fix the issue where long sentence translations are not fully displayed.

2026-08-25 20:01:48 +08:00

test_user_dictionary_journal.cpp

style: 用 .clang-format 重排 server / windows / ui / log

2026-09-06 12:13:47 +09:00

test_voice_batch_protocol.cpp

refactor(server): share batch voice encoding and provider codecs

2026-09-06 04:35:40 +09:00

test_voice_composition_pipe.cpp

style: 用 .clang-format 重排 server / windows / ui / log

2026-09-06 12:13:47 +09:00

test_voice_providers.cpp

Provide more slots for custom prompts.

2026-08-21 12:58:40 +08:00

test_wubi.cpp

Add support for the Wubi input method.

2026-07-13 18:35:52 +08:00