{"release":{"tag":{"name":"v1.3.3-beta","path":"/feiyuchuixue/sz-boot-parent/tags/v1.3.3-beta","tree_path":"/feiyuchuixue/sz-boot-parent/tree/v1.3.3-beta","message":"","commit":{"id":"aa006068f35ea29944af1a4f7112c9cced57a10c","short_id":"aa00606","title":"更新版本号v1.3.3-beta","title_markdown":"更新版本号v1.3.3-beta","description":"","description_markdown":"","message":"更新版本号v1.3.3-beta\n","message_markdown":"更新版本号v1.3.3-beta","detail_path":"/feiyuchuixue/sz-boot-parent/commit/aa006068f35ea29944af1a4f7112c9cced57a10c","commits_path":"/feiyuchuixue/sz-boot-parent/commits/aa006068f35ea29944af1a4f7112c9cced57a10c","tree_path":"/feiyuchuixue/sz-boot-parent/tree/aa006068f35ea29944af1a4f7112c9cced57a10c","author":{"name":"INS6","email":"feiyuchuixue@163.com","username":"feiyuchuixue","user_path":"/feiyuchuixue","enterprise_user_path":null,"image_path":"https://foruda.gitee.com/avatar/1718845171204865524/5315044_feiyuchuixue_1718845171.png!avatar30","is_gitee_user":true,"is_enterprise_user":null,"widget_url":""},"committer":{"name":"INS6","email":"feiyuchuixue@163.com","username":"feiyuchuixue","user_path":"/feiyuchuixue","enterprise_user_path":null,"image_path":"https://foruda.gitee.com/avatar/1718845171204865524/5315044_feiyuchuixue_1718845171.png!avatar30","is_gitee_user":true,"is_enterprise_user":null,"widget_url":""},"authored_date":"2026-02-24T21:41:26+08:00","committed_date":"2026-02-24T21:41:26+08:00","signature":null,"build_state":null},"archive_path":"/feiyuchuixue/sz-boot-parent/repository/archive/v1.3.3-beta","signature":null},"operating":{"edit":false,"download":true,"destroy":false,"enterprise_forbid_zip":false},"release":{"title":"v1.3.3-beta","path":"/feiyuchuixue/sz-boot-parent/releases/tag/v1.3.3-beta","tag_path":"/feiyuchuixue/sz-boot-parent/tree/v1.3.3-beta","project_id":35699695,"created_at":"2026-02-26T09:58:31+08:00","is_prerelease":false,"description":"## v1.3.3-beta （20260224）\r\n\r\n\u003E [!NOTE]\r\n\u003E\r\n\u003E [升级指南](https://szadmin.cn/md/Help/doc/other/upgrade.html#v1.3.3-beta)\r\n\r\n### sz-boot-parent\r\n\r\n#### 修改\r\n\r\n- oss.yml 配置，新增 `oss.allowedExts`,`oss.allowedMimeTypes` 配置项，用于执行允许上传的文件后缀和mime信息。\r\n\r\n#### 修复\r\n\r\n- 消息查询增加了消息归属验证，用户只能查询到自己相关的消息。\r\n- 重置账户密码接口增加权限标识验证，只有拥有对应权限的用户才可以进行重置。\r\n- 文件上传接口增加后缀和 MIME 类型白名单。\r\n- 模板下载接口校验路径合法性，非法路径仅返回错误提示，防止路径穿越。\r\n- 文件下载接口仅允许 http/https 协议，防止 SSRF 和任意文件读取。\r\n\r\n---\r\n\r\n### sz-admin\r\n\r\n#### 修复\r\n\r\n- 开启数据权限后菜单无可用权限时仍然提交空菜单的问题。(issue: https://github.com/feiyuchuixue/sz-admin/issues/27)。\r\n\r\n- 升级 axios 至 1.13.5，修复 CVE-2026-25639 漏洞。\r\n\r\n- 账号管理-更多菜单按钮的权限设置问题。","author":{"name":"INS6","username":"feiyuchuixue","path":"/feiyuchuixue","avatar_url":"https://foruda.gitee.com/avatar/1718845171204865524/5315044_feiyuchuixue_1718845171.png!avatar30"},"attach_files":[],"zip_download_url":"/feiyuchuixue/sz-boot-parent/releases/tag/v1.3.3-beta.zip","tar_download_url":"/feiyuchuixue/sz-boot-parent/releases/tag/v1.3.3-beta.tar.gz"}}}