yueli c07f25b646 fix: Fail-Closed 字段级安全加固 — 堵住15+端点价格泄露 ...

## stock.py
- _make_price_stripper(): 工厂函数,选单前缀自动剥离所有价格/成本字段
- _do_get_stock_list(permission_prefix): 每个item.to_dict()后剥离价格
- /all 端点: 非AI模式自动剥离价格字段
- /list 端点: permission_prefix='outbound_selection' 传递

## outbound.py
- /bom-match-stock: 返回前按stock_type剥离全部价格/成本字段
- /scan: result.pop('price', None)

## scrap.py
- /scan: result.pop('price', None)
- /records: 每条记录剥离 cost_at_scrap, total_loss

## transactions.py
- filter_item_by_permissions: 从空字典恢复完整20字段映射
- /borrow/stock-list: permission_prefix='op_borrow_apply' 传递

## buy.py / semi.py / product.py
- submit 成功响应剥离所有价格/成本字段(不泄露给前端)

## bom.py
- /base/list: 剥离 referencePrice

2026-07-16 11:26:05 +08:00

..

app

fix: Fail-Closed 字段级安全加固 — 堵住15+端点价格泄露

2026-07-16 11:26:05 +08:00

scripts

版本变更V3.31添加识图功能

2026-05-22 10:59:39 +08:00

__init__.py

物料-采购件入库页面功能实现

2026-01-27 15:50:23 +08:00

.dockerignore

版本变更V3.35将图像的处理统一更换到新表当中

2026-05-26 11:28:26 +08:00

.gitignore

修正git管理关系

2026-01-26 13:47:53 +08:00

config.py

fix(email): 审批通过后库管通知增加明细+DEBUG日志，修复MAIL_DEFAULT_SENDER格式问题

2026-04-28 16:46:12 +08:00

Dockerfile

物料-采购件入库页面功能实现

2026-01-27 15:50:23 +08:00

find_error.py

fix: correct targeted search logic for material/stock list to prevent unrelated results

2026-03-19 09:49:21 +08:00

fix_bom_perms.py

fix: BOM跳转恢复 + 采购单导入优化 + 基础信息表单禁用守卫

2026-07-14 17:02:07 +08:00

gunicorn.conf.py

物料-采购件入库页面功能实现

2026-01-27 15:50:23 +08:00

init_db.py

fix: correct targeted search logic for material/stock list to prevent unrelated results

2026-03-19 09:49:21 +08:00

migrations_add_cross_domain_permission.sql

feat: 全模块公司隔离 + crossDomain权限码动态跨域控制

2026-07-15 11:11:40 +08:00

requirements.txt

版本变更V3.35将图像的处理统一更换到新表当中

2026-05-26 11:28:26 +08:00

run.py

版本变更3.18

2026-05-12 15:17:42 +08:00

simhei.ttf

添加条形码内容

2026-02-02 15:06:20 +08:00

test_barcode_limit.py

fix: correct targeted search logic for material/stock list to prevent unrelated results

2026-03-19 09:49:21 +08:00

打印测试代码.py

fix(warehouse): fix 500 error on delete by extracting attributes before db commit

2026-04-02 10:31:53 +08:00