安全修复：1.密码哈希验证 2.移除硬编码凭据 3.JWT强密钥 4.CORS白名单

2026-04-19 19:20:12 +08:00
parent d00f41a120
commit 38eef97480
14 changed files with 111 additions and 53 deletions
@@ -17,7 +17,7 @@ module.exports = {
      DB_PORT: 5432,
      DB_NAME: 'company_finance_db',
      DB_USER: 'finance_user',
-      DB_PASSWORD: 'FinanceDB2026!'
+      DB_PASSWORD: process.env.DB_PASSWORD || ''
    }
  }]
 };