Files
gongxue-base/apps/server/src/archive/archive.module.ts
wangziqi 99ea931409 fix(security): 认证/越权/注入/上传/凭据全链路加固
由 OCR(open-codereview.ai,deepseek-v4-flash)审查驱动修复:
- JWT 生产必填、密码 8-72 字节、防枚举;全局 ValidationPipe
- classes/dashboard/schedules/students/attendance/archive/exams 越权与 IDOR 修复
- LIKE 通配符转义(14 处);上传 10MB 上限 + MIME 白名单 + 附件 XSS
- 集成配置 appSecret AES 加密 + 回填脚本;审计 best-effort;IP 来源防伪造

Reviewed-by: OCR (open-codereview.ai)
2026-08-09 21:29:22 +08:00

37 lines
1.3 KiB
TypeScript

import { Module } from '@nestjs/common';
import { TypeOrmModule } from '@nestjs/typeorm';
import { Student } from '../entities/student.entity';
import { StudentProfile } from '../entities/student-profile.entity';
import { StudentEnrollment } from '../entities/student-enrollment.entity';
import { ExamScore } from '../entities/exam-score.entity';
import { LearningRecord } from '../entities/learning-record.entity';
import { ResultArchive } from '../entities/result-archive.entity';
import { ArchiveAttachment } from '../entities/archive-attachment.entity';
import { AttendanceRecord } from '../entities/attendance-record.entity';
import { NotificationsModule } from '../notifications/notifications.module';
import { StudentsModule } from '../students/students.module';
import { ArchiveService } from './archive.service';
import { ArchiveReportService } from './archive-report.service';
import { ArchiveController } from './archive.controller';
@Module({
imports: [
TypeOrmModule.forFeature([
Student,
StudentProfile,
StudentEnrollment,
ExamScore,
LearningRecord,
ResultArchive,
ArchiveAttachment,
AttendanceRecord,
]),
NotificationsModule,
StudentsModule,
],
controllers: [ArchiveController],
providers: [ArchiveService, ArchiveReportService],
exports: [ArchiveService],
})
export class ArchiveModule {}