[{"data":1,"prerenderedAt":2484},["ShallowReactive",2],{"nav-docs-zh":3,"page-/zh/docs/security-updates/review-log":1157,"surround-/zh/docs/security-updates/review-log":2478,"raw-/zh/docs/security-updates/review-log":2481},[4,67,374,775,903,1075,1085,1110],{"title":5,"tags":6,"slug":6,"path":7,"stem":8,"children":9,"page":66,"sourcePath":7},"SpaceBuilder 入门",null,"/getting-started","00.getting-started",[10,15,20,27,34,39,45,50,55,60],{"title":11,"path":12,"stem":13,"tags":6,"slug":14,"sourcePath":12},"SpaceBuilder 简介","/getting-started/overview","00.getting-started/00.overview","/getting-started/overview/",{"title":16,"path":17,"stem":18,"tags":6,"slug":19,"sourcePath":17},"创建 SetFN 账户","/getting-started/create-setfn-account","00.getting-started/05.create-setfn-account","/getting-started/create-setfn-account/",{"title":21,"path":22,"stem":23,"tags":24,"slug":26,"sourcePath":22},"在 Linux 上安装","/getting-started/install-linux","00.getting-started/10.install-linux",[25],"recommended","/getting-started/install-linux/",{"title":28,"path":29,"stem":30,"tags":31,"slug":33,"sourcePath":29},"使用 Docker 安装","/getting-started/install-docker","00.getting-started/12.install-docker",[32],"preparing","/getting-started/install-docker/",{"title":35,"path":36,"stem":37,"tags":6,"slug":38,"sourcePath":36},"在 Windows 上安装","/getting-started/install-windows","00.getting-started/14.install-windows","/getting-started/install-windows/",{"title":40,"path":41,"stem":42,"tags":43,"slug":44,"sourcePath":41},"在 macOS 上安装","/getting-started/install-macos","00.getting-started/16.install-macos",[32],"/getting-started/install-macos/",{"title":46,"path":47,"stem":48,"tags":6,"slug":49,"sourcePath":47},"初始设置","/getting-started/initial-setup","00.getting-started/20.initial-setup","/getting-started/initial-setup/",{"title":51,"path":52,"stem":53,"tags":6,"slug":54,"sourcePath":52},"许可证激活","/getting-started/license-activation","00.getting-started/30.license-activation","/getting-started/license-activation/",{"title":56,"path":57,"stem":58,"tags":6,"slug":59,"sourcePath":57},"查看访问地址（本地/内网）","/getting-started/access-url","00.getting-started/35.access-url","/getting-started/access-url/",{"title":61,"path":62,"stem":63,"tags":64,"slug":65,"sourcePath":62},"选择外部访问方式","/getting-started/access-domain","00.getting-started/40.access-domain",[25],"/getting-started/access-domain/",false,{"title":68,"tags":6,"slug":6,"path":69,"stem":70,"children":71,"page":66,"sourcePath":69},"管理空间","/admin","10.admin",[72,92,162,197,249,274,289,299,339],{"title":73,"tags":6,"slug":6,"path":74,"stem":75,"children":76,"page":66,"sourcePath":74},"管理员首页","/admin/home","10.admin/00.home",[77,82,87],{"title":78,"path":79,"stem":80,"tags":6,"slug":81,"sourcePath":79},"访问管理员页面","/admin/home/admin-page-access","10.admin/00.home/00.admin-page-access","/admin/home/admin-page-access/",{"title":83,"path":69,"stem":84,"tags":6,"slug":85,"sourcePath":86},"管理员菜单导览","10.admin/00.home/00.overview","/admin/","/admin/home/overview",{"title":88,"path":89,"stem":90,"tags":6,"slug":91,"sourcePath":89},"许可证管理","/admin/home/license","10.admin/00.home/20.license","/admin/home/license/",{"title":93,"tags":6,"slug":6,"path":94,"stem":95,"children":96,"page":66,"sourcePath":94},"用户管理","/admin/user-management","10.admin/10.user-management",[97,102,107,112,117,122,127,132,137,142,147,152,157],{"title":98,"path":99,"stem":100,"tags":6,"slug":101,"sourcePath":99},"设置注册策略和默认权限","/admin/user-management/signup-policy","10.admin/10.user-management/02.signup-policy","/admin/user-management/signup-policy/",{"title":103,"path":104,"stem":105,"tags":6,"slug":106,"sourcePath":104},"登记注册条款","/admin/user-management/signup-terms","10.admin/10.user-management/04.signup-terms","/admin/user-management/signup-terms/",{"title":108,"path":109,"stem":110,"tags":6,"slug":111,"sourcePath":109},"创建用户账户","/admin/user-management/invite-new-member","10.admin/10.user-management/10.invite-new-member","/admin/user-management/invite-new-member/",{"title":113,"path":114,"stem":115,"tags":6,"slug":116,"sourcePath":114},"修改用户账户","/admin/user-management/edit-member","10.admin/10.user-management/11.edit-member","/admin/user-management/edit-member/",{"title":118,"path":119,"stem":120,"tags":6,"slug":121,"sourcePath":119},"添加管理员","/admin/user-management/add-new-admin","10.admin/10.user-management/12.add-new-admin","/admin/user-management/add-new-admin/",{"title":123,"path":124,"stem":125,"tags":6,"slug":126,"sourcePath":124},"团队管理","/admin/user-management/team","10.admin/10.user-management/22.team","/admin/user-management/team/",{"title":128,"path":129,"stem":130,"tags":6,"slug":131,"sourcePath":129},"等级管理","/admin/user-management/level","10.admin/10.user-management/24.level","/admin/user-management/level/",{"title":133,"path":134,"stem":135,"tags":6,"slug":136,"sourcePath":134},"查看访问日志","/admin/user-management/access-log","10.admin/10.user-management/30.access-log","/admin/user-management/access-log/",{"title":138,"path":139,"stem":140,"tags":6,"slug":141,"sourcePath":139},"管理活跃设备","/admin/user-management/active-devices","10.admin/10.user-management/31.active-devices","/admin/user-management/active-devices/",{"title":143,"path":144,"stem":145,"tags":6,"slug":146,"sourcePath":144},"设置账户与安全策略","/admin/user-management/account-security","10.admin/10.user-management/32.account-security","/admin/user-management/account-security/",{"title":148,"path":149,"stem":150,"tags":6,"slug":151,"sourcePath":149},"设置人机验证（CAPTCHA）","/admin/user-management/captcha","10.admin/10.user-management/33.captcha","/admin/user-management/captcha/",{"title":153,"path":154,"stem":155,"tags":6,"slug":156,"sourcePath":154},"设置通知发送","/admin/user-management/notice-settings","10.admin/10.user-management/34.notice-settings","/admin/user-management/notice-settings/",{"title":158,"path":159,"stem":160,"tags":6,"slug":161,"sourcePath":159},"向成员群发通知邮件","/admin/user-management/bulk-mail","10.admin/10.user-management/36.bulk-mail","/admin/user-management/bulk-mail/",{"title":163,"tags":6,"slug":6,"path":164,"stem":165,"children":166,"page":66,"sourcePath":164},"服务配置","/admin/service-config","10.admin/20.service-config",[167,172,177,182,187,192],{"title":168,"path":169,"stem":170,"tags":6,"slug":171,"sourcePath":169},"文件区域设置","/admin/service-config/file-area","10.admin/20.service-config/10.file-area","/admin/service-config/file-area/",{"title":173,"path":174,"stem":175,"tags":6,"slug":176,"sourcePath":174},"Webhook 设置","/admin/service-config/webhook-settings","10.admin/20.service-config/16.webhook-settings","/admin/service-config/webhook-settings/",{"title":178,"path":179,"stem":180,"tags":6,"slug":181,"sourcePath":179},"社区设置","/admin/service-config/community-space","10.admin/20.service-config/22.community-space","/admin/service-config/community-space/",{"title":183,"path":184,"stem":185,"tags":6,"slug":186,"sourcePath":184},"AI 聊天机器人策略设置","/admin/service-config/community-ai-chatbot","10.admin/20.service-config/24.community-ai-chatbot","/admin/service-config/community-ai-chatbot/",{"title":188,"path":189,"stem":190,"tags":6,"slug":191,"sourcePath":189},"邮件设置","/admin/service-config/email-settings","10.admin/20.service-config/30.email-settings","/admin/service-config/email-settings/",{"title":193,"path":194,"stem":195,"tags":6,"slug":196,"sourcePath":194},"品牌设置","/admin/service-config/brand","10.admin/20.service-config/40.brand","/admin/service-config/brand/",{"title":198,"tags":6,"slug":6,"path":199,"stem":200,"children":201,"page":66,"sourcePath":199},"知识服务","/admin/knowledge","10.admin/30.knowledge",[202,207,214,219,224,229,234,239,244],{"title":203,"path":199,"stem":204,"tags":6,"slug":205,"sourcePath":206},"了解知识服务","10.admin/30.knowledge/00.overview","/admin/knowledge/","/admin/knowledge/overview",{"title":208,"path":209,"stem":210,"children":211,"tags":6,"slug":213,"sourcePath":209},"采集与索引","/admin/knowledge/indexing","10.admin/30.knowledge/10.indexing",[212],{"title":208,"path":209,"stem":210,"tags":6,"slug":213,"sourcePath":209},"/admin/knowledge/indexing/",{"title":215,"path":216,"stem":217,"tags":6,"slug":218,"sourcePath":216},"搜索质量与语言","/admin/knowledge/search","10.admin/30.knowledge/20.search","/admin/knowledge/search/",{"title":220,"path":221,"stem":222,"tags":6,"slug":223,"sourcePath":221},"知识存储","/admin/knowledge/storage","10.admin/30.knowledge/30.storage","/admin/knowledge/storage/",{"title":225,"path":226,"stem":227,"tags":6,"slug":228,"sourcePath":226},"知识存储运维","/admin/knowledge/storage-operations","10.admin/30.knowledge/32.storage-operations","/admin/knowledge/storage-operations/",{"title":230,"path":231,"stem":232,"tags":6,"slug":233,"sourcePath":231},"连接 Qdrant","/admin/knowledge/qdrant","10.admin/30.knowledge/34.qdrant","/admin/knowledge/qdrant/",{"title":235,"path":236,"stem":237,"tags":6,"slug":238,"sourcePath":236},"准备 Qdrant 服务器","/admin/knowledge/qdrant-server-setup","10.admin/30.knowledge/35.qdrant-server-setup","/admin/knowledge/qdrant-server-setup/",{"title":240,"path":241,"stem":242,"tags":6,"slug":243,"sourcePath":241},"连接 Milvus","/admin/knowledge/milvus","10.admin/30.knowledge/36.milvus","/admin/knowledge/milvus/",{"title":245,"path":246,"stem":247,"tags":6,"slug":248,"sourcePath":246},"外部搜索与依据","/admin/knowledge/web-search","10.admin/30.knowledge/40.web-search","/admin/knowledge/web-search/",{"title":250,"tags":6,"slug":6,"path":251,"stem":252,"children":253,"page":66,"sourcePath":251},"AI 服务","/admin/ai","10.admin/35.ai",[254,259,264,269],{"title":255,"path":251,"stem":256,"tags":6,"slug":257,"sourcePath":258},"管理 AI 服务","10.admin/35.ai/00.overview","/admin/ai/","/admin/ai/overview",{"title":260,"path":261,"stem":262,"tags":6,"slug":263,"sourcePath":261},"设置模型与运行时","/admin/ai/models","10.admin/35.ai/10.models","/admin/ai/models/",{"title":265,"path":266,"stem":267,"tags":6,"slug":268,"sourcePath":266},"设置工具与集成","/admin/ai/integrations","10.admin/35.ai/20.integrations","/admin/ai/integrations/",{"title":270,"path":271,"stem":272,"tags":6,"slug":273,"sourcePath":271},"管理 MCP 服务器","/admin/ai/mcp","10.admin/35.ai/30.mcp","/admin/ai/mcp/",{"title":275,"tags":6,"slug":6,"path":276,"stem":277,"children":278,"page":66,"sourcePath":276},"插件","/admin/plugin","10.admin/40.plugin",[279,284],{"title":280,"path":281,"stem":282,"tags":6,"slug":283,"sourcePath":281},"管理插件","/admin/plugin/overview","10.admin/40.plugin/00.overview","/admin/plugin/overview/",{"title":285,"path":286,"stem":287,"tags":6,"slug":288,"sourcePath":286},"扩展插件设置","/admin/plugin/settings","10.admin/40.plugin/10.settings","/admin/plugin/settings/",{"title":290,"path":291,"stem":292,"children":293,"page":66,"sourcePath":291},"Operations","/admin/operations","10.admin/45.operations",[294],{"title":295,"path":291,"stem":296,"tags":6,"slug":297,"sourcePath":298},"查看运维与审计记录","10.admin/45.operations/00.overview","/admin/operations/","/admin/operations/overview",{"title":300,"tags":6,"slug":6,"path":301,"stem":302,"children":303,"page":66,"sourcePath":301},"安全管理","/admin/security","10.admin/50.security",[304,309,314,319,324,329,334],{"title":305,"path":306,"stem":307,"tags":6,"slug":308,"sourcePath":306},"安全概览","/admin/security/overview","10.admin/50.security/00.overview","/admin/security/overview/",{"title":310,"path":311,"stem":312,"tags":6,"slug":313,"sourcePath":311},"查看审计日志","/admin/security/audit-log","10.admin/50.security/05.audit-log","/admin/security/audit-log/",{"title":315,"path":316,"stem":317,"tags":6,"slug":318,"sourcePath":316},"屏蔽管理","/admin/security/block-management","10.admin/50.security/10.block-management","/admin/security/block-management/",{"title":320,"path":321,"stem":322,"tags":6,"slug":323,"sourcePath":321},"安全设置","/admin/security/security-setting","10.admin/50.security/12.security-setting","/admin/security/security-setting/",{"title":325,"path":326,"stem":327,"tags":6,"slug":328,"sourcePath":326},"处理待批准设备","/admin/security/device-approvals","10.admin/50.security/14.device-approvals","/admin/security/device-approvals/",{"title":330,"path":331,"stem":332,"tags":6,"slug":333,"sourcePath":331},"IP 访问限制","/admin/security/ip-restriction","10.admin/50.security/16.ip-restriction","/admin/security/ip-restriction/",{"title":335,"path":336,"stem":337,"tags":6,"slug":338,"sourcePath":336},"设置管理员两步验证","/admin/security/two-factor-auth","10.admin/50.security/18.two-factor-auth","/admin/security/two-factor-auth/",{"title":340,"tags":6,"slug":6,"path":341,"stem":342,"children":343,"page":66,"sourcePath":341},"系统管理","/admin/system-admin","10.admin/60.system-admin",[344,349,354,359,364,369],{"title":345,"path":346,"stem":347,"tags":6,"slug":348,"sourcePath":346},"设备信息","/admin/system-admin/device-info","10.admin/60.system-admin/10.device-info","/admin/system-admin/device-info/",{"title":350,"path":351,"stem":352,"tags":6,"slug":353,"sourcePath":351},"服务器重启与系统维护","/admin/system-admin/server-restart","10.admin/60.system-admin/12.server-restart","/admin/system-admin/server-restart/",{"title":355,"path":356,"stem":357,"tags":6,"slug":358,"sourcePath":356},"后台服务","/admin/system-admin/background-service","10.admin/60.system-admin/14.background-service","/admin/system-admin/background-service/",{"title":360,"path":361,"stem":362,"tags":6,"slug":363,"sourcePath":361},"更新 SpaceBuilder","/admin/system-admin/update","10.admin/60.system-admin/16.update","/admin/system-admin/update/",{"title":365,"path":366,"stem":367,"tags":6,"slug":368,"sourcePath":366},"卸载 SpaceBuilder","/admin/system-admin/uninstall","10.admin/60.system-admin/18.uninstall","/admin/system-admin/uninstall/",{"title":370,"path":371,"stem":372,"tags":6,"slug":373,"sourcePath":371},"迁移服务器","/admin/system-admin/server-migration","10.admin/60.system-admin/20.server-migration","/admin/system-admin/server-migration/",{"title":375,"tags":6,"slug":6,"path":376,"stem":377,"children":378,"page":66,"sourcePath":376},"使用工作空间","/workspace","20.workspace",[379,419,439,523,662,718,754],{"title":380,"tags":6,"slug":6,"path":381,"stem":382,"children":383,"page":66,"sourcePath":381},"菜单","/workspace/menu","20.workspace/05.menu",[384,389,394,399,404,409,414],{"title":385,"path":386,"stem":387,"tags":6,"slug":388,"sourcePath":386},"工作空间简介","/workspace/menu/overview","20.workspace/05.menu/00.overview","/workspace/menu/overview/",{"title":390,"path":391,"stem":392,"tags":6,"slug":393,"sourcePath":391},"团队空间","/workspace/menu/team-space","20.workspace/05.menu/05.team-space","/workspace/menu/team-space/",{"title":395,"path":396,"stem":397,"tags":6,"slug":398,"sourcePath":396},"客户端空间","/workspace/menu/client-space","20.workspace/05.menu/06.client-space","/workspace/menu/client-space/",{"title":400,"path":401,"stem":402,"tags":6,"slug":403,"sourcePath":401},"收藏夹","/workspace/menu/favorites","20.workspace/05.menu/10.favorites","/workspace/menu/favorites/",{"title":405,"path":406,"stem":407,"tags":6,"slug":408,"sourcePath":406},"最近文档","/workspace/menu/recent","20.workspace/05.menu/20.recent","/workspace/menu/recent/",{"title":410,"path":411,"stem":412,"tags":6,"slug":413,"sourcePath":411},"外部共享","/workspace/menu/external-share","20.workspace/05.menu/30.external-share","/workspace/menu/external-share/",{"title":415,"path":416,"stem":417,"tags":6,"slug":418,"sourcePath":416},"回收站","/workspace/menu/trash","20.workspace/05.menu/40.trash","/workspace/menu/trash/",{"title":420,"tags":6,"slug":6,"path":421,"stem":422,"children":423,"page":66,"sourcePath":421},"账户","/workspace/account","20.workspace/10.account",[424,429,434],{"title":425,"path":426,"stem":427,"tags":6,"slug":428,"sourcePath":426},"注册与登录","/workspace/account/signup","20.workspace/10.account/10.signup","/workspace/account/signup/",{"title":430,"path":431,"stem":432,"tags":6,"slug":433,"sourcePath":431},"重置密码","/workspace/account/reset-password","20.workspace/10.account/20.reset-password","/workspace/account/reset-password/",{"title":435,"path":436,"stem":437,"tags":6,"slug":438,"sourcePath":436},"账户设置","/workspace/account/account-settings","20.workspace/10.account/30.account-settings","/workspace/account/account-settings/",{"title":440,"tags":6,"slug":6,"path":441,"stem":442,"children":443,"page":66,"sourcePath":441},"文件夹","/workspace/folder","20.workspace/20.folder",[444,449,454,459,464,471,476,481,486,491,496,501,506,511,518],{"title":445,"path":446,"stem":447,"tags":6,"slug":448,"sourcePath":446},"文件夹基本功能","/workspace/folder/basic","20.workspace/20.folder/10.basic","/workspace/folder/basic/",{"title":450,"path":451,"stem":452,"tags":6,"slug":453,"sourcePath":451},"一次创建多个文件夹","/workspace/folder/bulk-folder-creation","20.workspace/20.folder/12.bulk-folder-creation","/workspace/folder/bulk-folder-creation/",{"title":455,"path":456,"stem":457,"tags":6,"slug":458,"sourcePath":456},"筛选","/workspace/folder/filter","20.workspace/20.folder/13.filter","/workspace/folder/filter/",{"title":460,"path":461,"stem":462,"tags":6,"slug":463,"sourcePath":461},"文件夹视图选项设置","/workspace/folder/folder-view-options","20.workspace/20.folder/14.folder-view-options","/workspace/folder/folder-view-options/",{"title":465,"path":466,"stem":467,"tags":468,"slug":470,"sourcePath":466},"将文件夹用作公告板","/workspace/folder/board-view","20.workspace/20.folder/15.board-view",[469],"hot","/workspace/folder/board-view/",{"title":472,"path":473,"stem":474,"tags":6,"slug":475,"sourcePath":473},"文件夹网页视图","/workspace/folder/folder-web-view","20.workspace/20.folder/16.folder-web-view","/workspace/folder/folder-web-view/",{"title":477,"path":478,"stem":479,"tags":6,"slug":480,"sourcePath":478},"整理文件夹","/workspace/folder/folder-organize","20.workspace/20.folder/17.folder-organize","/workspace/folder/folder-organize/",{"title":482,"path":483,"stem":484,"tags":6,"slug":485,"sourcePath":483},"文件夹公告（README）","/workspace/folder/folder-readme","20.workspace/20.folder/18.folder-readme","/workspace/folder/folder-readme/",{"title":487,"path":488,"stem":489,"tags":6,"slug":490,"sourcePath":488},"导出文件夹/文件列表","/workspace/folder/folder-export","20.workspace/20.folder/20.folder-export","/workspace/folder/folder-export/",{"title":492,"path":493,"stem":494,"tags":6,"slug":495,"sourcePath":493},"按等级设置访问权限","/workspace/folder/level-access-permissions","20.workspace/20.folder/24.level-access-permissions","/workspace/folder/level-access-permissions/",{"title":497,"path":498,"stem":499,"tags":6,"slug":500,"sourcePath":498},"按团队设置访问权限","/workspace/folder/team-access-permissions","20.workspace/20.folder/26.team-access-permissions","/workspace/folder/team-access-permissions/",{"title":502,"path":503,"stem":504,"tags":6,"slug":505,"sourcePath":503},"设置文件规则","/workspace/folder/file-rules","20.workspace/20.folder/28.file-rules","/workspace/folder/file-rules/",{"title":507,"path":508,"stem":509,"tags":6,"slug":510,"sourcePath":508},"文件夹 Webhook","/workspace/folder/webhook","20.workspace/20.folder/30.webhook","/workspace/folder/webhook/",{"title":512,"path":513,"stem":514,"children":515,"tags":6,"slug":517,"sourcePath":513},"设置文件夹知识索引","/workspace/folder/knowledge-index","20.workspace/20.folder/32.knowledge-index",[516],{"title":512,"path":513,"stem":514,"tags":6,"slug":517,"sourcePath":513},"/workspace/folder/knowledge-index/",{"title":519,"path":520,"stem":521,"tags":6,"slug":522,"sourcePath":520},"业务自动化文件夹","/workspace/folder/automation","20.workspace/20.folder/40.automation","/workspace/folder/automation/",{"title":524,"tags":6,"slug":6,"path":525,"stem":526,"children":527,"page":66,"sourcePath":525},"文件","/workspace/file","20.workspace/30.file",[528,533,538,543,548,553,558,563,568,573,578,583,588,593,598,603,608,613,618,623,628,633,637,642,647,652,657],{"title":529,"path":530,"stem":531,"tags":6,"slug":532,"sourcePath":530},"文件管理基本功能","/workspace/file/overview","20.workspace/30.file/00.overview","/workspace/file/overview/",{"title":534,"path":535,"stem":536,"tags":6,"slug":537,"sourcePath":535},"边看文件边查看列表","/workspace/file/list-in-file","20.workspace/30.file/05.list-in-file","/workspace/file/list-in-file/",{"title":539,"path":540,"stem":541,"tags":6,"slug":542,"sourcePath":540},"查看和编辑 Markdown、文本文件","/workspace/file/text-file-viewer","20.workspace/30.file/10.text-file-viewer","/workspace/file/text-file-viewer/",{"title":544,"path":545,"stem":546,"tags":6,"slug":547,"sourcePath":545},"查看 HTML 文件","/workspace/file/html-viewer","20.workspace/30.file/11.html-viewer","/workspace/file/html-viewer/",{"title":549,"path":550,"stem":551,"tags":6,"slug":552,"sourcePath":550},"查看和编辑 CSV 文件","/workspace/file/csv-viewer","20.workspace/30.file/12.csv-viewer","/workspace/file/csv-viewer/",{"title":554,"path":555,"stem":556,"tags":6,"slug":557,"sourcePath":555},"查看图片/视频文件","/workspace/file/image-file-viewer","20.workspace/30.file/13.image-file-viewer","/workspace/file/image-file-viewer/",{"title":559,"path":560,"stem":561,"tags":6,"slug":562,"sourcePath":560},"查看 Office/PDF 文件","/workspace/file/office-viewer","20.workspace/30.file/14.office-viewer","/workspace/file/office-viewer/",{"title":564,"path":565,"stem":566,"tags":6,"slug":567,"sourcePath":565},"粘贴网页 (HTML)","/workspace/file/paste-html","20.workspace/30.file/20.paste-html","/workspace/file/paste-html/",{"title":569,"path":570,"stem":571,"tags":6,"slug":572,"sourcePath":570},"粘贴截图","/workspace/file/paste-screenshot","20.workspace/30.file/21.paste-screenshot","/workspace/file/paste-screenshot/",{"title":574,"path":575,"stem":576,"tags":6,"slug":577,"sourcePath":575},"粘贴 Markdown (MD)","/workspace/file/paste-md","20.workspace/30.file/22.paste-md","/workspace/file/paste-md/",{"title":579,"path":580,"stem":581,"tags":6,"slug":582,"sourcePath":580},"屏幕录制","/workspace/file/screen-recording","20.workspace/30.file/23.screen-recording","/workspace/file/screen-recording/",{"title":584,"path":585,"stem":586,"tags":6,"slug":587,"sourcePath":585},"快捷笔记","/workspace/file/quick-note","20.workspace/30.file/24.quick-note","/workspace/file/quick-note/",{"title":589,"path":590,"stem":591,"tags":6,"slug":592,"sourcePath":590},"文件标签","/workspace/file/file-tag","20.workspace/30.file/33.file-tag","/workspace/file/file-tag/",{"title":594,"path":595,"stem":596,"tags":6,"slug":597,"sourcePath":595},"批量重命名文件","/workspace/file/bulk-name-revise","20.workspace/30.file/34.bulk-name-revise","/workspace/file/bulk-name-revise/",{"title":599,"path":600,"stem":601,"tags":6,"slug":602,"sourcePath":600},"文件转换","/workspace/file/file-convert-overview","20.workspace/30.file/40.file-convert-overview","/workspace/file/file-convert-overview/",{"title":604,"path":605,"stem":606,"tags":6,"slug":607,"sourcePath":605},"模板文件","/workspace/file/templates","20.workspace/30.file/41.templates","/workspace/file/templates/",{"title":609,"path":610,"stem":611,"tags":6,"slug":612,"sourcePath":610},"待办列表 (Todo)","/workspace/file/template-todo","20.workspace/30.file/42.template-todo","/workspace/file/template-todo/",{"title":614,"path":615,"stem":616,"tags":6,"slug":617,"sourcePath":615},"审批表单","/workspace/file/template-approval","20.workspace/30.file/43.template-approval","/workspace/file/template-approval/",{"title":619,"path":620,"stem":621,"tags":6,"slug":622,"sourcePath":620},"看板 (Kanban)","/workspace/file/template-kanban","20.workspace/30.file/44.template-kanban","/workspace/file/template-kanban/",{"title":624,"path":625,"stem":626,"tags":6,"slug":627,"sourcePath":625},"时间线","/workspace/file/template-timeline","20.workspace/30.file/45.template-timeline","/workspace/file/template-timeline/",{"title":629,"path":630,"stem":631,"tags":6,"slug":632,"sourcePath":630},"记事本","/workspace/file/template-memo","20.workspace/30.file/46.template-memo","/workspace/file/template-memo/",{"title":634,"path":635,"stem":636,"tags":6,"slug":635,"sourcePath":635},"AI 聊天文件","/workspace/file/ai-chat-file","20.workspace/30.file/47.ai-chat-file",{"title":638,"path":639,"stem":640,"tags":6,"slug":641,"sourcePath":639},"查看文件更改记录","/workspace/file/audit-trail","20.workspace/30.file/50.audit-trail","/workspace/file/audit-trail/",{"title":643,"path":644,"stem":645,"tags":6,"slug":646,"sourcePath":644},"文件版本管理","/workspace/file/version-trail","20.workspace/30.file/51.version-trail","/workspace/file/version-trail/",{"title":648,"path":649,"stem":650,"tags":6,"slug":651,"sourcePath":649},"编辑锁定","/workspace/file/file-lock","20.workspace/30.file/52.file-lock","/workspace/file/file-lock/",{"title":653,"path":654,"stem":655,"tags":6,"slug":656,"sourcePath":654},"文件加密","/workspace/file/file-encrypt","20.workspace/30.file/53.file-encrypt","/workspace/file/file-encrypt/",{"title":658,"path":659,"stem":660,"tags":6,"slug":661,"sourcePath":659},"注册磁盘文件","/workspace/file/disk-file-registration","20.workspace/30.file/60.disk-file-registration","/workspace/file/disk-file-registration/",{"title":663,"tags":6,"slug":6,"path":664,"stem":665,"children":666,"page":66,"sourcePath":664},"协作","/workspace/cooperation","20.workspace/35.cooperation",[667,672,677,682,687,692,697,702,707,713],{"title":668,"path":669,"stem":670,"tags":6,"slug":671,"sourcePath":669},"文件与文件夹评论","/workspace/cooperation/file-comments","20.workspace/35.cooperation/00.file-comments","/workspace/cooperation/file-comments/",{"title":673,"path":674,"stem":675,"tags":6,"slug":676,"sourcePath":674},"聊天","/workspace/cooperation/chat","20.workspace/35.cooperation/10.chat","/workspace/cooperation/chat/",{"title":678,"path":679,"stem":680,"tags":6,"slug":681,"sourcePath":679},"协作聊天与编辑锁定","/workspace/cooperation/collaboration-chat","20.workspace/35.cooperation/11.collaboration-chat","/workspace/cooperation/collaboration-chat/",{"title":683,"path":684,"stem":685,"tags":6,"slug":686,"sourcePath":684},"跟随团队成员的工作位置","/workspace/cooperation/follow-team-location","20.workspace/35.cooperation/12.follow-team-location","/workspace/cooperation/follow-team-location/",{"title":688,"path":689,"stem":690,"tags":6,"slug":691,"sourcePath":689},"提及","/workspace/cooperation/mention","20.workspace/35.cooperation/14.mention","/workspace/cooperation/mention/",{"title":693,"path":694,"stem":695,"tags":6,"slug":696,"sourcePath":694},"私信","/workspace/cooperation/dm","20.workspace/35.cooperation/16.dm","/workspace/cooperation/dm/",{"title":698,"path":699,"stem":700,"tags":6,"slug":701,"sourcePath":699},"通知存档","/workspace/cooperation/notification-inbox","20.workspace/35.cooperation/18.notification-inbox","/workspace/cooperation/notification-inbox/",{"title":703,"path":704,"stem":705,"tags":6,"slug":706,"sourcePath":704},"查看团队动态","/workspace/cooperation/file-activity","20.workspace/35.cooperation/30.file-activity","/workspace/cooperation/file-activity/",{"title":708,"path":709,"stem":710,"tags":711,"slug":712,"sourcePath":709},"创建外部共享链接","/workspace/cooperation/share-link-creation","20.workspace/35.cooperation/40.share-link-creation",[469],"/workspace/cooperation/share-link-creation/",{"title":714,"path":715,"stem":716,"tags":6,"slug":717,"sourcePath":715},"通过电子邮件发送外部共享链接","/workspace/cooperation/share-link-email","20.workspace/35.cooperation/42.share-link-email","/workspace/cooperation/share-link-email/",{"title":719,"tags":6,"slug":6,"path":720,"stem":721,"children":722,"page":66,"sourcePath":720},"搜索","/workspace/search","20.workspace/40.search",[723,728,734,739,744,749],{"title":724,"path":725,"stem":726,"tags":6,"slug":727,"sourcePath":725},"文件搜索","/workspace/search/search","20.workspace/40.search/00.search","/workspace/search/search/",{"title":729,"path":730,"stem":731,"tags":732,"slug":733,"sourcePath":730},"上下文搜索（AI 搜索）","/workspace/search/context-search","20.workspace/40.search/10.context-search",[469],"/workspace/search/context-search/",{"title":735,"path":736,"stem":737,"tags":6,"slug":738,"sourcePath":736},"图片搜索","/workspace/search/image-search","20.workspace/40.search/20.image-search","/workspace/search/image-search/",{"title":740,"path":741,"stem":742,"tags":6,"slug":743,"sourcePath":741},"聊天搜索","/workspace/search/chat-search","20.workspace/40.search/30.chat-search","/workspace/search/chat-search/",{"title":745,"path":746,"stem":747,"tags":6,"slug":748,"sourcePath":746},"评论搜索","/workspace/search/comment-search","20.workspace/40.search/40.comment-search","/workspace/search/comment-search/",{"title":750,"path":751,"stem":752,"tags":6,"slug":753,"sourcePath":751},"同义词搜索","/workspace/search/synonym-search","20.workspace/40.search/50.synonym-search","/workspace/search/synonym-search/",{"title":755,"tags":6,"slug":6,"path":756,"stem":757,"children":758,"page":66,"sourcePath":756},"AI","/workspace/ai","20.workspace/50.ai",[759,764,770],{"title":760,"path":761,"stem":762,"tags":6,"slug":763,"sourcePath":761},"AI 功能概览","/workspace/ai/overview","20.workspace/50.ai/00.overview","/workspace/ai/overview/",{"title":765,"path":766,"stem":767,"tags":768,"slug":769,"sourcePath":766},"向本地 AI 委托工作","/workspace/ai/ai-work","20.workspace/50.ai/10.ai-work",[469],"/workspace/ai/ai-work/",{"title":771,"path":772,"stem":773,"tags":6,"slug":774,"sourcePath":772},"使用外部 AI","/workspace/ai/external-ai","20.workspace/50.ai/20.external-ai","/workspace/ai/external-ai/",{"title":776,"tags":6,"slug":6,"path":777,"stem":778,"children":779,"page":66,"sourcePath":777},"Webspace","/webspace","40.webspace",[780,785,790,795,800,805,811,816,821,826,831,866],{"title":781,"path":782,"stem":783,"tags":6,"slug":784,"sourcePath":782},"什么是 Webspace？","/webspace/overview","40.webspace/00.overview","/webspace/overview/",{"title":786,"path":787,"stem":788,"tags":6,"slug":789,"sourcePath":787},"部署网站","/webspace/website-release","40.webspace/10.website-release","/webspace/website-release/",{"title":791,"path":792,"stem":793,"tags":6,"slug":794,"sourcePath":792},"创建架构文件（.sfn）","/webspace/create-database","40.webspace/20.create-database","/webspace/create-database/",{"title":796,"path":797,"stem":798,"tags":6,"slug":799,"sourcePath":797},"构建 API 并部署数据库","/webspace/api-overview","40.webspace/24.api-overview","/webspace/api-overview/",{"title":801,"path":802,"stem":803,"tags":6,"slug":804,"sourcePath":802},"查看前端示例","/webspace/frontend-example","40.webspace/26.frontend-example","/webspace/frontend-example/",{"title":806,"path":807,"stem":808,"tags":809,"slug":810,"sourcePath":807},"创建团队内部 Web 服务","/webspace/internal-webservice","40.webspace/32.internal-webservice",[469],"/webspace/internal-webservice/",{"title":812,"path":813,"stem":814,"tags":6,"slug":815,"sourcePath":813},"创建对外公开的 Web 服务","/webspace/external-webservice","40.webspace/34.external-webservice","/webspace/external-webservice/",{"title":817,"path":818,"stem":819,"tags":6,"slug":820,"sourcePath":818},"SQL 导入与导出","/webspace/sql-converter","40.webspace/42.sql-converter","/webspace/sql-converter/",{"title":822,"path":823,"stem":824,"tags":6,"slug":825,"sourcePath":823},"将架构转换为代码","/webspace/code-converter","40.webspace/44.code-converter","/webspace/code-converter/",{"title":827,"path":828,"stem":829,"tags":6,"slug":830,"sourcePath":828},"性能与扩展","/webspace/performance","40.webspace/48.performance","/webspace/performance/",{"title":832,"tags":6,"slug":6,"path":833,"stem":834,"children":835,"page":66,"sourcePath":833},"Webspace 管理","/webspace/admin","40.webspace/50.admin",[836,841,846,851,856,861],{"title":837,"path":838,"stem":839,"tags":6,"slug":840,"sourcePath":838},"开始使用 Webspace 管理","/webspace/admin/overview","40.webspace/50.admin/00.overview","/webspace/admin/overview/",{"title":842,"path":843,"stem":844,"tags":6,"slug":845,"sourcePath":843},"运营概览","/webspace/admin/operations","40.webspace/50.admin/10.operations","/webspace/admin/operations/",{"title":847,"path":848,"stem":849,"tags":6,"slug":850,"sourcePath":848},"工作空间访问","/webspace/admin/workspace-access","40.webspace/50.admin/20.workspace-access","/webspace/admin/workspace-access/",{"title":852,"path":853,"stem":854,"tags":6,"slug":855,"sourcePath":853},"API · 站点安全","/webspace/admin/api-site-security","40.webspace/50.admin/30.api-site-security","/webspace/admin/api-site-security/",{"title":857,"path":858,"stem":859,"tags":6,"slug":860,"sourcePath":858},"服务与容量","/webspace/admin/service-capacity","40.webspace/50.admin/40.service-capacity","/webspace/admin/service-capacity/",{"title":862,"path":863,"stem":864,"tags":6,"slug":865,"sourcePath":863},"部署管理与前端发布","/webspace/admin/deployments","40.webspace/50.admin/50.deployments","/webspace/admin/deployments/",{"title":867,"tags":868,"slug":6,"path":869,"stem":870,"children":871,"page":66,"sourcePath":869},"Webspace 实操教程",[469],"/webspace/examples","40.webspace/60.examples",[872,877,882,888,893,898],{"title":873,"path":869,"stem":874,"tags":6,"slug":875,"sourcePath":876},"Webspace 应用篇","40.webspace/60.examples/00.overview","/webspace/examples/","/webspace/examples/overview",{"title":878,"path":879,"stem":880,"tags":6,"slug":881,"sourcePath":879},"打造自己的业务系统","/webspace/examples/my-own-system","40.webspace/60.examples/10.my-own-system","/webspace/examples/my-own-system/",{"title":883,"path":884,"stem":885,"tags":886,"slug":887,"sourcePath":884},"制作实时五子棋游戏","/webspace/examples/realtime-gomoku","40.webspace/60.examples/20.realtime-gomoku",[469],"/webspace/examples/realtime-gomoku/",{"title":889,"path":890,"stem":891,"tags":6,"slug":892,"sourcePath":890},"用文件夹文件搭建资料公告板","/webspace/examples/folder-board","40.webspace/60.examples/30.folder-board","/webspace/examples/folder-board/",{"title":894,"path":895,"stem":896,"tags":6,"slug":897,"sourcePath":895},"搭建多人协同怪物讨伐","/webspace/examples/monster-raid","40.webspace/60.examples/40.monster-raid","/webspace/examples/monster-raid/",{"title":899,"path":900,"stem":901,"tags":6,"slug":902,"sourcePath":900},"部署 AI 咨询聊天示例","/webspace/examples/ai-support-chat","40.webspace/60.examples/50.ai-support-chat","/webspace/examples/ai-support-chat/",{"title":904,"tags":6,"slug":6,"path":905,"stem":906,"children":907,"page":66,"sourcePath":905},"使用插件","/plugin","50.plugin",[908,913,933,994,1015,1050],{"title":909,"path":910,"stem":911,"tags":6,"slug":912,"sourcePath":910},"插件概述","/plugin/overview","50.plugin/00.overview","/plugin/overview/",{"title":914,"tags":6,"slug":6,"path":915,"stem":916,"children":917,"page":66,"sourcePath":915},"日历","/plugin/calendar","50.plugin/10.calendar",[918,923,928],{"title":919,"path":920,"stem":921,"tags":6,"slug":922,"sourcePath":920},"日历介绍","/plugin/calendar/overview","50.plugin/10.calendar/00.overview","/plugin/calendar/overview/",{"title":924,"path":925,"stem":926,"tags":6,"slug":927,"sourcePath":925},"创建、修改和删除日程","/plugin/calendar/create-event","50.plugin/10.calendar/10.create-event","/plugin/calendar/create-event/",{"title":929,"path":930,"stem":931,"tags":6,"slug":932,"sourcePath":930},"查看活动记录","/plugin/calendar/file-activity","50.plugin/10.calendar/40.file-activity","/plugin/calendar/file-activity/",{"title":934,"tags":6,"slug":6,"path":935,"stem":936,"children":937,"page":66,"sourcePath":935},"电子邮件","/plugin/email","50.plugin/20.email",[938,943,948,953,958,964,969,974,979,984,989],{"title":939,"path":940,"stem":941,"tags":6,"slug":942,"sourcePath":940},"电子邮件介绍","/plugin/email/overview","50.plugin/20.email/00.overview","/plugin/email/overview/",{"title":944,"path":945,"stem":946,"tags":6,"slug":947,"sourcePath":945},"电子邮件设置","/plugin/email/setfn-email-setting","50.plugin/20.email/05.setfn-email-setting","/plugin/email/setfn-email-setting/",{"title":949,"path":950,"stem":951,"tags":6,"slug":952,"sourcePath":950},"连接外部电子邮件","/plugin/email/external-email","50.plugin/20.email/07.external-email","/plugin/email/external-email/",{"title":954,"path":955,"stem":956,"tags":6,"slug":957,"sourcePath":955},"电子邮件基本功能","/plugin/email/email-basic","50.plugin/20.email/10.email-basic","/plugin/email/email-basic/",{"title":959,"path":960,"stem":961,"tags":6,"slug":962,"sourcePath":963},"使用邮件 AI 助手","/plugin/email/ai-assistant","50.plugin/20.email/15.email-ai-assistant","/plugin/email/ai-assistant/","/plugin/email/email-ai-assistant",{"title":965,"path":966,"stem":967,"tags":6,"slug":968,"sourcePath":966},"撰写和发送电子邮件","/plugin/email/email-compose","50.plugin/20.email/20.email-compose","/plugin/email/email-compose/",{"title":970,"path":971,"stem":972,"tags":6,"slug":973,"sourcePath":971},"附加文件","/plugin/email/email-attachment","50.plugin/20.email/30.email-attachment","/plugin/email/email-attachment/",{"title":975,"path":976,"stem":977,"tags":6,"slug":978,"sourcePath":976},"电子邮件文件夹管理","/plugin/email/email-folders","50.plugin/20.email/40.email-folders","/plugin/email/email-folders/",{"title":980,"path":981,"stem":982,"tags":6,"slug":983,"sourcePath":981},"自动分类电子邮件","/plugin/email/email-auto-classify","50.plugin/20.email/50.email-auto-classify","/plugin/email/email-auto-classify/",{"title":985,"path":986,"stem":987,"tags":6,"slug":988,"sourcePath":986},"电子邮件文件的保管与共享","/plugin/email/email-open-in-space","50.plugin/20.email/60.email-open-in-space","/plugin/email/email-open-in-space/",{"title":990,"path":991,"stem":992,"tags":6,"slug":993,"sourcePath":991},"电子邮件安全","/plugin/email/email-security","50.plugin/20.email/70.email-security","/plugin/email/email-security/",{"title":995,"tags":6,"slug":6,"path":996,"stem":997,"children":998,"page":66,"sourcePath":996},"工作流（业务自动化）","/plugin/workflow","50.plugin/30.workflow",[999,1004,1010],{"title":1000,"path":1001,"stem":1002,"tags":6,"slug":1003,"sourcePath":1001},"工作流简介","/plugin/workflow/overview","50.plugin/30.workflow/00.overview","/plugin/workflow/overview/",{"title":1005,"path":1006,"stem":1007,"tags":1008,"slug":1009,"sourcePath":1006},"创建新工作流","/plugin/workflow/new-workflow","50.plugin/30.workflow/10.new-workflow",[469],"/plugin/workflow/new-workflow/",{"title":1011,"path":1012,"stem":1013,"tags":6,"slug":1014,"sourcePath":1012},"查看执行记录","/plugin/workflow/execution-history","50.plugin/30.workflow/20.execution-history","/plugin/workflow/execution-history/",{"title":1016,"tags":6,"slug":6,"path":1017,"stem":1018,"children":1019,"page":66,"sourcePath":1017},"微调（AI 训练）","/plugin/fine-tuning","50.plugin/40.fine-tuning",[1020,1025,1030,1035,1040,1045],{"title":1021,"path":1022,"stem":1023,"tags":6,"slug":1024,"sourcePath":1022},"微调简介","/plugin/fine-tuning/overview","50.plugin/40.fine-tuning/00.overview","/plugin/fine-tuning/overview/",{"title":1026,"path":1027,"stem":1028,"tags":6,"slug":1029,"sourcePath":1027},"训练数据预处理","/plugin/fine-tuning/pre-processing","50.plugin/40.fine-tuning/10.pre-processing","/plugin/fine-tuning/pre-processing/",{"title":1031,"path":1032,"stem":1033,"tags":6,"slug":1034,"sourcePath":1032},"训练","/plugin/fine-tuning/training","50.plugin/40.fine-tuning/20.training","/plugin/fine-tuning/training/",{"title":1036,"path":1037,"stem":1038,"tags":6,"slug":1039,"sourcePath":1037},"评估","/plugin/fine-tuning/evaluation","50.plugin/40.fine-tuning/30.evaluation","/plugin/fine-tuning/evaluation/",{"title":1041,"path":1042,"stem":1043,"tags":6,"slug":1044,"sourcePath":1042},"聊天测试","/plugin/fine-tuning/chat-test","50.plugin/40.fine-tuning/40.chat-test","/plugin/fine-tuning/chat-test/",{"title":1046,"path":1047,"stem":1048,"tags":6,"slug":1049,"sourcePath":1047},"导出","/plugin/fine-tuning/export","50.plugin/40.fine-tuning/50.export","/plugin/fine-tuning/export/",{"title":1051,"tags":6,"slug":6,"path":1052,"stem":1053,"children":1054,"page":66,"sourcePath":1052},"EDC（数据收集）","/plugin/edc","50.plugin/50.edc",[1055,1060,1065,1070],{"title":1056,"path":1057,"stem":1058,"tags":6,"slug":1059,"sourcePath":1057},"EDC 简介","/plugin/edc/overview","50.plugin/50.edc/00.overview","/plugin/edc/overview/",{"title":1061,"path":1062,"stem":1063,"tags":6,"slug":1064,"sourcePath":1062},"数据录入、Audit Trail","/plugin/edc/data-entry","50.plugin/50.edc/10.data-entry","/plugin/edc/data-entry/",{"title":1066,"path":1067,"stem":1068,"tags":6,"slug":1069,"sourcePath":1067},"构建器","/plugin/edc/builder","50.plugin/50.edc/20.builder","/plugin/edc/builder/",{"title":1071,"path":1072,"stem":1073,"tags":6,"slug":1074,"sourcePath":1072},"用户/机构设置","/plugin/edc/account","50.plugin/50.edc/30.account","/plugin/edc/account/",{"title":1076,"tags":6,"slug":6,"path":1077,"stem":1078,"children":1079,"page":66,"sourcePath":1077},"命令行工具","/cli","90.cli",[1080],{"title":1081,"path":1082,"stem":1083,"tags":6,"slug":1084,"sourcePath":1082},"使用命令管理服务器","/cli/commands","90.cli/10.commands","/cli/commands/",{"title":1086,"tags":6,"slug":6,"path":1087,"stem":1088,"children":1089,"page":66,"sourcePath":1087},"安全更新","/security-updates","95.security-updates",[1090,1095,1100,1105],{"title":1091,"path":1092,"stem":1093,"tags":6,"slug":1094,"sourcePath":1092},"了解安全检查与更新方式","/security-updates/overview","95.security-updates/00.overview","/security-updates/overview/",{"title":1096,"path":1097,"stem":1098,"tags":6,"slug":1099,"sourcePath":1097},"安全检查记录","/security-updates/review-log","95.security-updates/10.review-log","/security-updates/review-log/",{"title":1101,"path":1102,"stem":1103,"tags":6,"slug":1104,"sourcePath":1102},"主要漏洞检查状态","/security-updates/vulnerability-status","95.security-updates/20.vulnerability-status","/security-updates/vulnerability-status/",{"title":1106,"path":1107,"stem":1108,"tags":6,"slug":1109,"sourcePath":1107},"检查服务器安全更新","/security-updates/server-checklist","95.security-updates/30.server-checklist","/security-updates/server-checklist/",{"title":1111,"tags":6,"slug":6,"path":1112,"stem":1113,"children":1114,"page":66,"sourcePath":1112},"FAQ","/faq","99.FAQ",[1115,1121,1127,1133,1139,1145,1151],{"title":1116,"path":1117,"stem":1118,"tags":6,"slug":1119,"sourcePath":1120},"SetFN 与云服务对比","/FAQ/comparison-cloud","99.FAQ/10.comparison-cloud","/FAQ/comparison-cloud/","/faq/comparison-cloud",{"title":1122,"path":1123,"stem":1124,"tags":6,"slug":1125,"sourcePath":1126},"SetFN 与 NAS 对比","/FAQ/comparison-nas","99.FAQ/20.comparison-nas","/FAQ/comparison-nas/","/faq/comparison-nas",{"title":1128,"path":1129,"stem":1130,"tags":6,"slug":1131,"sourcePath":1132},"安全政策","/FAQ/security-policy","99.FAQ/30.security-policy","/FAQ/security-policy/","/faq/security-policy",{"title":1134,"path":1135,"stem":1136,"tags":6,"slug":1137,"sourcePath":1138},"SetFN 为什么这么快","/FAQ/why-fast","99.FAQ/40.why-fast","/FAQ/why-fast/","/faq/why-fast",{"title":1140,"path":1141,"stem":1142,"tags":6,"slug":1143,"sourcePath":1144},"许可证 FAQ","/FAQ/license-faq","99.FAQ/50.license-faq","/FAQ/license-faq/","/faq/license-faq",{"title":1146,"path":1147,"stem":1148,"tags":6,"slug":1149,"sourcePath":1150},"AI 功能 FAQ","/FAQ/ai-faq","99.FAQ/60.ai-faq","/FAQ/ai-faq/","/faq/ai-faq",{"title":1152,"path":1153,"stem":1154,"tags":6,"slug":1155,"sourcePath":1156},"问题排查指南","/FAQ/troubleshooting","99.FAQ/70.troubleshooting","/FAQ/troubleshooting/","/faq/troubleshooting",{"id":1158,"title":1096,"body":1159,"cover":6,"description":2462,"extension":2463,"image":6,"meta":2464,"navigation":2465,"path":1097,"reviewSummary":2466,"reviewedAt":2467,"seo":2468,"slug":1099,"stem":1098,"tags":6,"thumbnail":6,"thumbnailPosition":6,"thumbnailScale":6,"__hash__":2477},"docs_zh/95.security-updates/10.review-log.md",{"type":1160,"value":1161,"toc":2448},"minimal",[1162,1165,1174,1177,1180,1185,1188,1194,1377,1382,1392,1396,1399,1403,1585,1590,1600,1604,1607,1611,1876,1881,1894,1898,1901,1906,1929,1933,2164,2169,2172,2189,2193,2212,2216,2219,2277,2281,2286,2290,2329,2333,2336,2429,2432],[1163,1164,1096],"h1",{"id":1096},[1166,1167,1168,1169,1173],"p",{},"按最新顺序记录 SetFN 进行的安全检查。每条记录包含检查范围、发现的问题和处理状态。状态标注与",[1170,1171,1101],"a",{"href":1172},"/zh/docs/security-updates/vulnerability-status/#%E7%8A%B6%E6%80%81%E6%A0%87%E6%B3%A8","相同。",[1166,1175,1176],{},"为了避免问题的利用方法被泄露，记录中只写影响和处理内容，不写重现步骤。",[1178,1179],"hr",{},[1181,1182,1184],"h2",{"id":1183},"_2026-10-24-ai-交叉审查与后续处理","2026-10-24 AI 交叉审查与后续处理",[1166,1186,1187],{},"第 1~3 轮检查中由 Claude 修复的内容，由 OpenAI Codex 以只读方式重新审查。既确认代码是否按预期修复，也一并查看了界面可用性（UI/UX）；每条指出的问题都通过代码核实，只修复了实际存在的缺陷，随后由 Codex 反复审查修复版本共 5 轮，直到不再有阻断性问题。第 3 轮检查遗留的事项（管理员两步验证、以长度为中心的密码规则、TinyMCE）也在当天一并处理。",[1166,1189,1190],{},[1191,1192,1193],"strong",{},"发现的问题与处理",[1195,1196,1197,1213],"table",{},[1198,1199,1200],"thead",{},[1201,1202,1203,1207,1210],"tr",{},[1204,1205,1206],"th",{},"领域",[1204,1208,1209],{},"内容",[1204,1211,1212],{},"状态",[1214,1215,1216,1239,1250,1261,1273,1285,1297,1309,1321,1333,1344,1355,1366],"tbody",{},[1201,1217,1218,1222,1234],{},[1219,1220,1221],"td",{},"认证",[1219,1223,1224,1225,1229,1230,1233],{},"为管理员账户新增认证应用两步验证（含恢复码），并在安全设置中加入要求所有管理员完成设置的 ",[1226,1227,1228],"code",{},"要求管理员启用两步验证"," 策略。请参阅",[1170,1231,335],{"href":1232},"/zh/docs/admin/security/two-factor-auth/","。",[1219,1235,1236],{},[1226,1237,1238],{},"已修复（待发布）",[1201,1240,1241,1243,1246],{},[1219,1242,1221],{},[1219,1244,1245],{},"启用或关闭两步验证时，会清理该账户的其他会话。强制策略同样适用于已打开的实时连接和进行中的 MCP 操作；更改密码后，等待中的登录步骤将失效。",[1219,1247,1248],{},[1226,1249,1238],{},[1201,1251,1252,1254,1257],{},[1219,1253,1221],{},[1219,1255,1256],{},"新安装服务器的默认密码规则改为至少 12 个字符、不要求组合字符种类（NIST SP 800-63B-4）。安装向导和命令行工具遵循相同规则，现有服务器的规则不变。",[1219,1258,1259],{},[1226,1260,1238],{},[1201,1262,1263,1266,1269],{},[1219,1264,1265],{},"编辑器",[1219,1267,1268],{},"将群发通知邮件编辑器更换为 Tiptap，并移除了 HTML 文件的可视化编辑器（TinyMCE）。TinyMCE 6 中遗留的未修复漏洞不再产生影响。HTML 文件只能以源码方式编辑。",[1219,1270,1271],{},[1226,1272,1238],{},[1201,1274,1275,1278,1281],{},[1219,1276,1277],{},"权限",[1219,1279,1280],{},"对演示文稿、表格、自动转换插入的图片，以及相似图片搜索和 AI 回答依据的正文，会检查请求者的权限。Office 预览结果只有创建者才能获取。",[1219,1282,1283],{},[1226,1284,1238],{},[1201,1286,1287,1290,1293],{},[1219,1288,1289],{},"文档转换",[1219,1291,1292],{},"通过文档中的 TeX 公式可能读取工作文件夹之外的文件。现已禁止读取工作文件夹之外的文件。",[1219,1294,1295],{},[1226,1296,1238],{},[1201,1298,1299,1302,1305],{},[1219,1300,1301],{},"服务器稳定性",[1219,1303,1304],{},"转换时分段读取文档结构，并限制加密文档的读取大小。外部转换工具在执行前会被标记为内存不足时优先终止的对象。",[1219,1306,1307],{},[1226,1308,1238],{},[1201,1310,1311,1314,1317],{},[1219,1312,1313],{},"记录",[1219,1315,1316],{},"补充了解除封禁仅部分成功时的处理，以及设置变更审计记录中缺失的项目。",[1219,1318,1319],{},[1226,1320,1238],{},[1201,1322,1323,1326,1329],{},[1219,1324,1325],{},"界面",[1219,1327,1328],{},"未发送群发邮件草稿就离开时，以及未保存恢复码就离开时，会显示确认窗口；并补充了键盘和屏幕阅读器的无障碍支持。",[1219,1330,1331],{},[1226,1332,1238],{},[1201,1334,1335,1337,1340],{},[1219,1336,1221],{},[1219,1338,1339],{},"为每个账户设置认证世代，在结束全部会话、修改密码或更改两步验证之后，旧会话以及由其派生的令牌刷新和应用登录都不再可用；即使删除会话失败也同样生效。",[1219,1341,1342],{},[1226,1343,1238],{},[1201,1345,1346,1348,1351],{},[1219,1347,1221],{},[1219,1349,1350],{},"结束全部会话时，也会一并断开通过登录和同意页面连接的 MCP OAuth 连接。用户自行创建的 API 密钥会保留。",[1219,1352,1353],{},[1226,1354,1238],{},[1201,1356,1357,1359,1362],{},[1219,1358,1301],{},[1219,1360,1361],{},"实时连接的阻断不再因缓慢的连接而延迟，并为加密文档处理设置了并发执行和等待数量的上限。",[1219,1363,1364],{},[1226,1365,1238],{},[1201,1367,1368,1370,1373],{},[1219,1369,1221],{},[1219,1371,1372],{},"服务器暂时无法确认登录状态时，不再让用户登出，而是重试。",[1219,1374,1375],{},[1226,1376,1238],{},[1166,1378,1379],{},[1191,1380,1381],{},"遗留限制",[1383,1384,1385,1389],"ul",{},[1386,1387,1388],"li",{},"浏览器会先将密码转换为哈希再发送，因此服务器无法直接强制执行密码长度规则。长度和组合规则在界面中检查，常见密码拦截在服务器端进行。",[1386,1390,1391],{},"策略应用状态和两步验证的等待状态保存在服务器内存中。重启服务器后，进行中的登录需要从头重新开始。",[1181,1393,1395],{"id":1394},"_2026-10-23-第-3-轮后续检查","2026-10-23 第 3 轮后续检查",[1166,1397,1398],{},"本轮落实了第 2 轮复查遗留的后续项目，以及国际标准文档的建议（NIST SP 800-63B-4 密码标准、OWASP Top 10:2025 A09 安全日志）。权限问题先用在修复前代码上失败的测试加以确认，然后进行了修复；修复版本在重新获取的源代码上重新构建并测试。",[1166,1400,1401],{},[1191,1402,1193],{},[1195,1404,1405,1415],{},[1198,1406,1407],{},[1201,1408,1409,1411,1413],{},[1204,1410,1206],{},[1204,1412,1209],{},[1204,1414,1212],{},[1214,1416,1417,1428,1439,1450,1461,1472,1484,1496,1507,1518,1529,1541,1552,1563,1574],{},[1201,1418,1419,1421,1424],{},[1219,1420,1277],{},[1219,1422,1423],{},"文档转换（AI 转换工具、文档转换、Office 预览）会从整个源文件夹获取图片，导致请求转换的用户无法读取的子文件夹中的图片可能进入结果文件。已改为只放入请求者可读取的图片。",[1219,1425,1426],{},[1226,1427,1238],{},[1201,1429,1430,1432,1435],{},[1219,1431,1277],{},[1219,1433,1434],{},"文档转换中，通过文档里写入的样式表、封面路径，服务器上其他文件的内容可能进入结果文件。现在会在转换前删除样式表指定和不安全的路径。因此，文档中指定的 CSS 样式不会应用到转换结果。",[1219,1436,1437],{},[1226,1438,1238],{},[1201,1440,1441,1443,1446],{},[1219,1442,1277],{},[1219,1444,1445],{},"知识搜索结果和 AI 回答依据仅凭查看权限就显示了文档正文的一部分。现在只有同时拥有查看和下载权限时才显示正文，仅有查看权限时只显示标题和位置。",[1219,1447,1448],{},[1226,1449,1238],{},[1201,1451,1452,1454,1457],{},[1219,1453,1277],{},[1219,1455,1456],{},"收藏、Office 预览与在线编辑、编辑历史没有重新确认团队空间系统文件夹的访问边界和当前权限。现在每次请求都会重新确认，编辑历史中的旧内容需要下载权限才能查看。",[1219,1458,1459],{},[1226,1460,1238],{},[1201,1462,1463,1465,1468],{},[1219,1464,1277],{},[1219,1466,1467],{},"网站（Web 空间）表格的合计、平均等汇总反映了读取受限列的值，而且仅凭行删除权限就能永久删除。现在不可读取的列不计入汇总，永久删除只能由管理员和部署负责人执行。",[1219,1469,1470],{},[1226,1471,1238],{},[1201,1473,1474,1477,1480],{},[1219,1475,1476],{},"自动化",[1219,1478,1479],{},"即使文档锁定等操作被拒绝，自动化和 Webhook 仍可能执行。现在只在操作成功时执行。",[1219,1481,1482],{},[1226,1483,1238],{},[1201,1485,1486,1489,1492],{},[1219,1487,1488],{},"设置",[1219,1490,1491],{},"应用文件夹设置组时，文件夹的知识利用设置可能被清除。现在会保留现有设置。",[1219,1493,1494],{},[1226,1495,1238],{},[1201,1497,1498,1500,1503],{},[1219,1499,1221],{},[1219,1501,1502],{},"设置新密码时，会拦截约 2 万个常用或曾泄露的密码（NIST SP 800-63B-4）。适用于注册、密码更改与重置、管理员创建账户与重置密码、命令行工具、安装向导；用现有密码登录不受影响。",[1219,1504,1505],{},[1226,1506,1238],{},[1201,1508,1509,1511,1514],{},[1219,1510,1313],{},[1219,1512,1513],{},"管理员更改安全与策略设置、封禁与解除封禁、更改用户权限、创建与删除账户、重置密码、批准与拒绝设备、更改会话与人机验证（CAPTCHA）策略时，会记入审计日志。记录内容包括操作的管理员、时间、访问 IP、变更的项目；密码、密钥等机密值不会记录。",[1219,1515,1516],{},[1226,1517,1238],{},[1201,1519,1520,1522,1525],{},[1219,1521,410],{},[1219,1523,1524],{},"修正了界面，使管理员关闭外部共享后，链接创建者仍可查看并删除现有链接。无法创建新链接。",[1219,1526,1527],{},[1226,1528,1238],{},[1201,1530,1531,1534,1537],{},[1219,1532,1533],{},"网页界面",[1219,1535,1536],{},"AI 请求上限、压缩下载等待等新的服务器拒绝原因，现在以用户语言的提示文字显示。",[1219,1538,1539],{},[1226,1540,1238],{},[1201,1542,1543,1545,1548],{},[1219,1544,1301],{},[1219,1546,1547],{},"打开大文本文件（如大容量 CSV）时会把整个文件加载到内存，多人同时打开时服务器内存可能耗尽。现在超过 16MB 的文件会分段发送。",[1219,1549,1550],{},[1226,1551,1238],{},[1201,1553,1554,1556,1559],{},[1219,1555,1301],{},[1219,1557,1558],{},"品牌 Logo 和 AI 图片摘要在解码图片前没有检查图片的宽度和高度。现在会先检查尺寸，过大的图片不再解码。",[1219,1560,1561],{},[1226,1562,1238],{},[1201,1564,1565,1567,1570],{},[1219,1566,1301],{},[1219,1568,1569],{},"处理边界损坏或嵌套极深的邮件的部分代码（当前未使用）没有深度限制，可能无法结束。现在限制了嵌套深度，出错时会停止。",[1219,1571,1572],{},[1226,1573,1238],{},[1201,1575,1576,1578,1581],{},[1219,1577,1301],{},[1219,1579,1580],{},"文档转换、图片、视频处理程序占用大量内存时，SetFN 服务器可能被代为终止。现在已标记为内存不足时优先终止这些程序。",[1219,1582,1583],{},[1226,1584,1238],{},[1166,1586,1587],{},[1191,1588,1589],{},"遗留事项",[1383,1591,1592],{},[1386,1593,1594,1595,1599],{},"本轮检查遗留的管理员两步验证、以长度为中心的密码规则（新安装默认值）、替换 TinyMCE，已在 ",[1170,1596,1598],{"href":1597},"#_2026-10-24-ai-%E4%BA%A4%E5%8F%89%E5%AE%A1%E6%9F%A5%E4%B8%8E%E5%90%8E%E7%BB%AD%E5%A4%84%E7%90%86","2026-10-24 AI 交叉审查","中处理。",[1181,1601,1603],{"id":1602},"_2026-10-23-第-2-轮复查","2026-10-23 第 2 轮复查",[1166,1605,1606],{},"第 1 轮修复后，同一天重新检查了整体。再次审查了第 1 轮修复是否有遗漏，并使用 AI（Claude）分领域审查了第 1 轮未涉及的部分（各功能的权限检查范围、输入处理、邮件、Webhook、AI 工具的权限边界、网页界面、机密信息与设置）。发现的问题先用在修复前代码上失败的测试加以确认，然后进行了修复。",[1166,1608,1609],{},[1191,1610,1193],{},[1195,1612,1613,1623],{},[1198,1614,1615],{},[1201,1616,1617,1619,1621],{},[1204,1618,1206],{},[1204,1620,1209],{},[1204,1622,1212],{},[1214,1624,1625,1636,1647,1658,1669,1680,1691,1702,1714,1725,1737,1749,1761,1773,1784,1796,1808,1820,1831,1842,1853,1864],{},[1201,1626,1627,1629,1632],{},[1219,1628,1277],{},[1219,1630,1631],{},"在搜索、文件夹树、实时文件、AI 文件工具中，普通用户可以指定管理员区域（所有用户的个人空间）。已改为只有全局管理员才能打开。",[1219,1633,1634],{},[1226,1635,1238],{},[1201,1637,1638,1640,1643],{},[1219,1639,1277],{},[1219,1641,1642],{},"文件路径可能越界到名称相似的其他用户的个人空间。已为所有空间的文件访问加入边界检查。",[1219,1644,1645],{},[1226,1646,1238],{},[1201,1648,1649,1651,1654],{},[1219,1650,1277],{},[1219,1652,1653],{},"直接查询数据库文件的功能没有路径权限检查，可以打开其他数据库文件。已加入权限检查和危险命令拦截。",[1219,1655,1656],{},[1226,1657,1238],{},[1201,1659,1660,1662,1665],{},[1219,1661,1277],{},[1219,1663,1664],{},"AI 日程工具没有确认日程所有者；AI 文件工具改为读取名称相似的文件时没有重新检查权限。",[1219,1666,1667],{},[1226,1668,1238],{},[1201,1670,1671,1673,1676],{},[1219,1672,1277],{},[1219,1674,1675],{},"补强了个人空间活动记录、空间间复制的源文件权限、按韩文字母表记差异的权限检查，以及收藏、转换状态、任务取消的所有者确认。",[1219,1677,1678],{},[1226,1679,1238],{},[1201,1681,1682,1684,1687],{},[1219,1683,1277],{},[1219,1685,1686],{},"网站（Webspace）表的列读写限制没有生效。已改为同时保护已删除的行和作者列。",[1219,1688,1689],{},[1226,1690,1238],{},[1201,1692,1693,1695,1698],{},[1219,1694,1277],{},[1219,1696,1697],{},"保存设置时如果缺少 IP 访问限制项，限制可能被关闭。",[1219,1699,1700],{},[1226,1701,1238],{},[1201,1703,1704,1707,1710],{},[1219,1705,1706],{},"数据隔离",[1219,1708,1709],{},"团队日程列表、收件箱、通知中可能看到其他用户的个人日程。",[1219,1711,1712],{},[1226,1713,1238],{},[1201,1715,1716,1718,1721],{},[1219,1717,1301],{},[1219,1719,1720],{},"自动补全请求同时到达时服务器可能停止。",[1219,1722,1723],{},[1226,1724,1238],{},[1201,1726,1727,1730,1733],{},[1219,1728,1729],{},"外部请求",[1219,1731,1732],{},"AI 模型连接把普通用户的请求一直转发到管理功能，部分功能可以向服务器内部地址发送请求。也阻止了登录信息被传递给插件的问题。",[1219,1734,1735],{},[1226,1736,1238],{},[1201,1738,1739,1742,1745],{},[1219,1740,1741],{},"内容隔离",[1219,1743,1744],{},"补强了网站静态文件（XML、XHTML）、文档转换预览、品牌设置值、PDF 转换引擎、登录后跳转地址。",[1219,1746,1747],{},[1226,1748,1238],{},[1201,1750,1751,1754,1757],{},[1219,1752,1753],{},"过载防护",[1219,1755,1756],{},"把请求大小限制改为按功能路径设定，为慢速请求正文加入时间限制，为并发上传预留存储空间配额，并把 IPv6 请求限制按地址段归并。",[1219,1758,1759],{},[1226,1760,1238],{},[1201,1762,1763,1766,1769],{},[1219,1764,1765],{},"数据保护",[1219,1767,1768],{},"改为在文字识别（OCR）没有结果时不删除原文件。",[1219,1770,1771],{},[1226,1772,1238],{},[1201,1774,1775,1777,1780],{},[1219,1776,1533],{},[1219,1778,1779],{},"把邮件撰写器的 HTML 净化改为标准净化工具（DOMPurify），并保护在新窗口打开的链接。",[1219,1781,1782],{},[1226,1783,1238],{},[1201,1785,1786,1789,1792],{},[1219,1787,1788],{},"邮件",[1219,1790,1791],{},"修改联系人可能影响其他用户的联系人，外部邮件账户可能占用公司内部地址。也阻止了对已停用邮箱的访问，以及对保存在团队空间中的共享邮箱原文文件的访问。",[1219,1793,1794],{},[1226,1795,1238],{},[1201,1797,1798,1801,1804],{},[1219,1799,1800],{},"文件与集成",[1219,1802,1803],{},"文件保存锁可能连其他用户的同名文件也一并锁住，下载的压缩文件内的名称可能被解压到其他文件夹。工作流集成改为每次重新确认用户，Webhook 令牌在日志中隐去，必须签名的设置也应用于现有 Webhook。",[1219,1805,1806],{},[1226,1807,1238],{},[1201,1809,1810,1813,1816],{},[1219,1811,1812],{},"共享",[1219,1814,1815],{},"关闭外部共享功能或收回创建者的共享权限后，现有共享链接仍可继续打开，并且可以通过并发请求超过使用次数限制。即使功能已关闭，创建者仍可查看并撤销自己的链接。",[1219,1817,1818],{},[1226,1819,1238],{},[1201,1821,1822,1824,1827],{},[1219,1823,1277],{},[1219,1825,1826],{},"一对一和群组聊天室的附件，同一团队的其他用户也可以通过文件功能打开。已改为只有该聊天室的参与者和管理员才能打开。",[1219,1828,1829],{},[1226,1830,1238],{},[1201,1832,1833,1835,1838],{},[1219,1834,1277],{},[1219,1836,1837],{},"因无权限而被拒绝的文件夹查询响应中，可能一并包含文件夹内项目的信息。",[1219,1839,1840],{},[1226,1841,1238],{},[1201,1843,1844,1846,1849],{},[1219,1845,1277],{},[1219,1847,1848],{},"保存文件和处理审批的请求在返回权限拒绝响应后仍可能被实际执行。现已改为一旦拒绝立即停止处理。",[1219,1850,1851],{},[1226,1852,1238],{},[1201,1854,1855,1857,1860],{},[1219,1856,1277],{},[1219,1858,1859],{},"为 AI 工具的文件夹设置查询与更改，以及基于文件内容生成的结果（研究、相似图片、文件夹分析）补强了权限检查。",[1219,1861,1862],{},[1226,1863,1238],{},[1201,1865,1866,1869,1872],{},[1219,1867,1868],{},"设置与机密信息",[1219,1870,1871],{},"确认仓库中没有机密密钥，密码哈希、令牌签名、邮件账户加密均适当。阻止了 API 说明页面经反向代理对外公开的问题，并删除了未使用的弱加密函数。",[1219,1873,1874],{},[1226,1875,1238],{},[1166,1877,1878],{},[1191,1879,1880],{},"运维人员须知",[1383,1882,1883],{},[1386,1884,1885,1886,1889,1890,1893],{},"如果外部 AI 集成（AP 桥接）使用 ",[1226,1887,1888],{},"/api/ai-proxy","，需要在服务器和集成端设置相同的 ",[1226,1891,1892],{},"SETFN_AI_PROXY_TOKEN"," 值。从本次修复起，仅凭没有令牌的本地请求无法访问。",[1181,1895,1897],{"id":1896},"_2026-10-23-发布前全面安全检查","2026-10-23 发布前全面安全检查",[1166,1899,1900],{},"以针对内存不足情况的攻击类型被公开为契机，在发布前重新检查了整个服务器。使用 AI（Claude）分五个领域审查代码，发现的问题在通过代码和测试再次确认后进行了修复。",[1166,1902,1903],{},[1191,1904,1905],{},"检查范围",[1383,1907,1908,1911,1914,1917,1920,1923,1926],{},[1386,1909,1910],{},"无需登录即可调用的功能的请求大小和连接时间",[1386,1912,1913],{},"一位用户的请求数据可能混入其他用户响应的路径",[1386,1915,1916],{},"把不完整的数据当作正常数据保存的路径",[1386,1918,1919],{},"请求反复发生时在服务器内存中持续累积的状态",[1386,1921,1922],{},"服务器与网页界面库的已知漏洞，文档处理程序 2025 年以后的主要漏洞",[1386,1924,1925],{},"KISA Boho Nara（보호나라）安全公告 463 条（2025-01-01 ~ 2026-10-22）",[1386,1927,1928],{},"OWASP Top 10:2025、OWASP ASVS 5.0、NIST SP 800-63B-4、KISA Web 漏洞检查项目",[1166,1930,1931],{},[1191,1932,1193],{},[1195,1934,1935,1945],{},[1198,1936,1937],{},[1201,1938,1939,1941,1943],{},[1204,1940,1206],{},[1204,1942,1209],{},[1204,1944,1212],{},[1214,1946,1947,1959,1970,1981,1992,2003,2014,2025,2036,2047,2058,2069,2081,2093,2105,2116,2127,2139,2151],{},[1201,1948,1949,1952,1955],{},[1219,1950,1951],{},"用户间数据隔离",[1219,1953,1954],{},"文件名自动补全中可能出现其他用户个人空间的文件名。改为按空间和用户拆分索引，管理员空间仅限管理员查询。",[1219,1956,1957],{},[1226,1958,1238],{},[1201,1960,1961,1963,1966],{},[1219,1962,1951],{},[1219,1964,1965],{},"同时查询团队日程和个人日程时，其他用户的个人日程可能混在一起显示。改为每个请求固定日程存储位置。",[1219,1967,1968],{},[1226,1969,1238],{},[1201,1971,1972,1974,1977],{},[1219,1973,1951],{},[1219,1975,1976],{},"在回收站中以覆盖方式恢复同名文件时，其他文件的评论和更改记录可能被改变。",[1219,1978,1979],{},[1226,1980,1238],{},[1201,1982,1983,1985,1988],{},[1219,1984,1301],{},[1219,1986,1987],{},"实时发送搜索结果的过程中如果连接断开，会在响应结束后仍尝试写入记录，可能导致服务器停止。",[1219,1989,1990],{},[1226,1991,1238],{},[1201,1993,1994,1996,1999],{},[1219,1995,1301],{},[1219,1997,1998],{},"整理了多个任务同时读写实时连接当前界面信息的竞争问题。",[1219,2000,2001],{},[1226,2002,1238],{},[1201,2004,2005,2007,2010],{},[1219,2006,1753],{},[1219,2008,2009],{},"服务器连接没有时间限制，容易受到大量打开慢速连接并保持不放的攻击。加入了标头接收时间、空闲连接时间和标头大小限制。",[1219,2011,2012],{},[1226,2013,1238],{},[1201,2015,2016,2018,2021],{},[1219,2017,1753],{},[1219,2019,2020],{},"存在没有请求正文大小限制的功能。为整个 API 设置了默认上限，并为无需登录即可调用的应用登录准备、设备注册确认、安装界面设置了单独的上限。",[1219,2022,2023],{},[1226,2024,1238],{},[1201,2026,2027,2029,2032],{},[1219,2028,1753],{},[1219,2030,2031],{},"登录失败记录和应用登录等待请求可能无限增长。加入了总数和按访问来源的数量上限。",[1219,2033,2034],{},[1226,2035,1238],{},[1201,2037,2038,2040,2043],{},[1219,2039,1753],{},[1219,2041,2042],{},"邮件重复处理记录、网站实时订阅、AI 请求并发执行、压缩下载并发任务、文件夹树缓存可能无限增长。已分别加入上限和定期清理。",[1219,2044,2045],{},[1226,2046,1238],{},[1201,2048,2049,2051,2054],{},[1219,2050,1765],{},[1219,2052,2053],{},"未告知长度的上传可能跳过存储空间配额检查；文档密码设置会原地覆盖文件，失败时可能损坏原文件。已改为边统计接收量边检查配额，文档密码设置和转换结果保存先写入临时文件再替换。",[1219,2055,2056],{},[1226,2057,1238],{},[1201,2059,2060,2062,2065],{},[1219,2061,1765],{},[1219,2063,2064],{},"过大的专利 XML 可能在被截断处理后删除原文件。已改为超过大小上限即视为失败，并且不删除只解析了一部分的原文件。",[1219,2066,2067],{},[1226,2068,1238],{},[1201,2070,2071,2074,2077],{},[1219,2072,2073],{},"文档处理程序",[1219,2075,2076],{},"LibreOffice 存在 Ubuntu 24.04 中尚未修复的漏洞（CVE-2026-63277）。已改为在用于文档转换的 LibreOffice 配置文件中禁用 Java。",[1219,2078,2079],{},[1226,2080,1238],{},[1201,2082,2083,2085,2088],{},[1219,2084,2073],{},[1219,2086,2087],{},"正在加强处理压缩、图像、文档文件时的大小上限。",[1219,2089,2090],{},[1226,2091,2092],{},"修复中",[1201,2094,2095,2098,2101],{},[1219,2096,2097],{},"依赖",[1219,2099,2100],{},"将 Go 服务器库的 41 项已知漏洞升级到修复版本，并把不再维护的压缩库替换为自有模块。",[1219,2102,2103],{},[1226,2104,1238],{},[1201,2106,2107,2109,2112],{},[1219,2108,2097],{},[1219,2110,2111],{},"将网页界面库（文档编辑器、PDF 查看、Markdown 查看等）严重程度为高及以上的 20 项漏洞升级到修复版本。",[1219,2113,2114],{},[1226,2115,1238],{},[1201,2117,2118,2120,2123],{},[1219,2119,2097],{},[1219,2121,2122],{},"HTML 文件编辑器（TinyMCE）的部分漏洞只在更高版本中修复，正在评估切换。邮件编辑器已通过输入净化加以阻止。",[1219,2124,2125],{},[1226,2126,2092],{},[1201,2128,2129,2132,2135],{},[1219,2130,2131],{},"安全标头",[1219,2133,2134],{},"禁止把管理员和账户界面嵌入其他站点，并限制了对 API 响应格式的猜测以及传到外部的地址信息。",[1219,2136,2137],{},[1226,2138,1238],{},[1201,2140,2141,2143,2146],{},[1219,2142,1221],{},[1219,2144,2145],{},"计划把密码策略改为 NIST 标准（用长度和常见密码拦截代替组合规则），并添加管理员两步验证。",[1219,2147,2148],{},[1226,2149,2150],{},"计划改进",[1201,2152,2153,2156,2159],{},[1219,2154,2155],{},"外部公告",[1219,2157,2158],{},"KISA 公告中没有直接影响 SetFN 的公告。根据运行环境可能相关的 32 条已整理为运维人员确认项目。",[1219,2160,2161],{},[1226,2162,2163],{},"需运维人员处理",[1166,2165,2166],{},[1191,2167,2168],{},"修复确认",[1166,2170,2171],{},"每项修复都附带了在修复前代码上会失败的测试。修复后，另外启动了与生产数据隔离的测试服务器，用命令行工具创建管理员和普通用户账户，然后通过实际请求确认了以下内容。",[1383,2173,2174,2177,2180,2183,2186],{},[1386,2175,2176],{},"其他用户个人空间的文件名不会出现在自动补全中",[1386,2178,2179],{},"同时查询团队和个人日程 40 次期间，个人日程不会混入团队列表",[1386,2181,2182],{},"对于不结束标头发送的慢速连接，服务器会在超过限制时间后断开",[1386,2184,2185],{},"过大的请求和过长的输入在读取正文之前即被拒绝",[1386,2187,2188],{},"管理员界面带有防点击劫持标头，而客户网站页面不带",[1166,2190,2191],{},[1191,2192,1880],{},[1383,2194,2195,2206],{},[1386,2196,2197,2198,2201,2202,2205],{},"新增了",[1170,2199,1106],{"href":2200},"/zh/docs/security-updates/server-checklist/","。介绍获取 Ubuntu ",[1226,2203,2204],{},"universe"," 软件包安全修复的方法，以及不安装 MuPDF 的原因。",[1386,2207,2208,2209,1233],{},"从 Linux 和 Windows 安装文档的推荐软件包中移除了 ",[1226,2210,2211],{},"mupdf-tools",[1181,2213,2215],{"id":2214},"_2026-10-20-2026-10-22-权限边界复查","2026-10-20 ~ 2026-10-22 权限边界复查",[1166,2217,2218],{},"使用 AI（OpenAI Codex）并行复查了权限和共享处理代码，发现的缺陷先用在修复前代码上失败的测试加以确认，然后进行了修复。",[1195,2220,2221,2229],{},[1198,2222,2223],{},[1201,2224,2225,2227],{},[1204,2226,1209],{},[1204,2228,1212],{},[1214,2230,2231,2241,2250,2259,2268],{},[1201,2232,2233,2236],{},[1219,2234,2235],{},"桌面同步列表中包含没有列出权限的文件夹的名称和文件大小的问题",[1219,2237,2238],{},[1226,2239,2240],{},"已处理",[1201,2242,2243,2246],{},[1219,2244,2245],{},"共享链接、回收站恢复、文档传输的权限处理缺陷，以及权限拒绝显示为服务器错误（500）的问题",[1219,2247,2248],{},[1226,2249,2240],{},[1201,2251,2252,2255],{},[1219,2253,2254],{},"已收回的权限可能在实时连接中复活的顺序问题，文件通知的接收人范围",[1219,2256,2257],{},[1226,2258,2240],{},[1201,2260,2261,2264],{},[1219,2262,2263],{},"在已退出的聊天室中仍能看到迟到的 AI 回复的问题",[1219,2265,2266],{},[1226,2267,2240],{},[1201,2269,2270,2273],{},[1219,2271,2272],{},"补充文档转换菜单和 OCR 结果保存的权限检查",[1219,2274,2275],{},[1226,2276,2240],{},[1181,2278,2280],{"id":2279},"_2026-10-19-限制-ai-日志原文","2026-10-19 限制 AI 日志原文",[1166,2282,2283,2284],{},"缩小了 AI 功能诊断日志的记录范围，避免过多留下请求原文。",[1226,2285,2240],{},[1181,2287,2289],{"id":2288},"_2026-10-13-加强转换与公开-web-权限","2026-10-13 加强转换与公开 Web 权限",[1195,2291,2292,2300],{},[1198,2293,2294],{},[1201,2295,2296,2298],{},[1204,2297,1209],{},[1204,2299,1212],{},[1214,2301,2302,2311,2320],{},[1201,2303,2304,2307],{},[1219,2305,2306],{},"转换文件夹重新处理功能没有路径权限检查的问题",[1219,2308,2309],{},[1226,2310,2240],{},[1201,2312,2313,2316],{},[1219,2314,2315],{},"把没有转换设置的文件夹中删除原文件的默认值改为保留",[1219,2317,2318],{},[1226,2319,2240],{},[1201,2321,2322,2325],{},[1219,2323,2324],{},"加强公开 Web 查看权限和文档历史边界，补强实时连接重新认证的回归问题",[1219,2326,2327],{},[1226,2328,2240],{},[1181,2330,2332],{"id":2331},"_2026-09-25-全方位安全检查","2026-09-25 全方位安全检查",[1166,2334,2335],{},"检查了权限、共享、认证、网页界面脚本执行（XSS）、服务器端请求伪造（SSRF）、AI 与工作流工具。向隔离的测试服务器发送真实请求确认后进行了修复。",[1195,2337,2338,2346],{},[1198,2339,2340],{},[1201,2341,2342,2344],{},[1204,2343,1209],{},[1204,2345,1212],{},[1214,2347,2348,2357,2366,2375,2384,2393,2402,2411,2420],{},[1201,2349,2350,2353],{},[1219,2351,2352],{},"加强共享链接令牌的类型、签发者、路径范围验证",[1219,2354,2355],{},[1226,2356,2240],{},[1201,2358,2359,2362],{},[1219,2360,2361],{},"改为先规范化路径再判定权限，列表查询也应用上级文件夹权限",[1219,2363,2364],{},[1226,2365,2240],{},[1201,2367,2368,2371],{},[1219,2369,2370],{},"加强 CSRF 例外条件，CORS 来源比较包含端口，更改密码时终止所有会话",[1219,2372,2373],{},[1226,2374,2240],{},[1201,2376,2377,2380],{},[1219,2378,2379],{},"对 Office 文档的保存和锁定应用路径权限和文件夹策略",[1219,2381,2382],{},[1226,2383,2240],{},[1201,2385,2386,2389],{},[1219,2387,2388],{},"禁止 AI 工具接收内部参数，对文件创建和覆盖应用权限和编辑锁",[1219,2390,2391],{},[1226,2392,2240],{},[1201,2394,2395,2398],{},[1219,2396,2397],{},"工作流集成必须使用令牌，对文件工具应用权限检查",[1219,2399,2400],{},[1226,2401,2240],{},[1201,2403,2404,2407],{},[1219,2405,2406],{},"加强邮件、Markdown、Word 文档显示的 HTML 净化，隔离上传文件的响应",[1219,2408,2409],{},[1226,2410,2240],{},[1201,2412,2413,2416],{},[1219,2414,2415],{},"为防止账户锁定功能被滥用，添加最近登录成功 IP 的例外",[1219,2417,2418],{},[1226,2419,2240],{},[1201,2421,2422,2425],{},[1219,2423,2424],{},"加强实时功能中管理员操作（强制退出等）的权限",[1219,2426,2427],{},[1226,2428,2240],{},[1181,2430,2431],{"id":2431},"相关文档",[1383,2433,2434,2439,2444],{},[1386,2435,2436],{},[1170,2437,1091],{"href":2438},"/zh/docs/security-updates/overview/",[1386,2440,2441],{},[1170,2442,1101],{"href":2443},"/zh/docs/security-updates/vulnerability-status/",[1386,2445,2446],{},[1170,2447,1106],{"href":2200},{"title":2449,"searchDepth":2450,"depth":2451,"links":2452},"",2,3,[2453,2454,2455,2456,2457,2458,2459,2460,2461],{"id":1183,"depth":2450,"text":1184},{"id":1394,"depth":2450,"text":1395},{"id":1602,"depth":2450,"text":1603},{"id":1896,"depth":2450,"text":1897},{"id":2214,"depth":2450,"text":2215},{"id":2279,"depth":2450,"text":2280},{"id":2288,"depth":2450,"text":2289},{"id":2331,"depth":2450,"text":2332},{"id":2431,"depth":2450,"text":2431},"按最新顺序记录 SetFN 进行的安全检查的日期、范围、发现的问题和处理状态。","md",{},true,"发布前安全检查第 1~3 轮与 AI（Claude、Codex）交叉审查：新增管理员两步验证、将新安装的密码规则改为以长度为中心、更换邮件与 HTML 编辑器（移除 TinyMCE）、修复权限绕过与数据隔离问题、修复库漏洞 61 项、比对 KISA 公告 463 条","2026-10-24",{"title":2469,"description":2470,"ogType":2471,"twitterCard":2472,"keywords":2473},"安全检查记录 | SetFN Docs","SetFN 安全检查的按日期记录。可以按最新顺序查看检查范围、发现的问题和处理状态。","article","summary_large_image",[1096,2474,2475,2476],"安全更新历史","漏洞处理","SetFN","H9lvmjuSt1wpEn0YkNgOoiGZSNYc8fukpFrS8mAEOw0",[2479,2480],{"title":1091,"path":1092,"stem":1093,"slug":1094,"children":-1},{"title":1101,"path":1102,"stem":1103,"slug":1104,"children":-1},{"title":1096,"filename":2482,"content":2483},"review-log","# 安全检查记录\n\n按最新顺序记录 SetFN 进行的安全检查。每条记录包含检查范围、发现的问题和处理状态。状态标注与[主要漏洞检查状态](/zh/docs/security-updates/vulnerability-status/#状态标注)相同。\n\n为了避免问题的利用方法被泄露，记录中只写影响和处理内容，不写重现步骤。\n\n---\n\n## 2026-10-24 AI 交叉审查与后续处理\n\n第 1~3 轮检查中由 Claude 修复的内容，由 OpenAI Codex 以只读方式重新审查。既确认代码是否按预期修复，也一并查看了界面可用性（UI/UX）；每条指出的问题都通过代码核实，只修复了实际存在的缺陷，随后由 Codex 反复审查修复版本共 5 轮，直到不再有阻断性问题。第 3 轮检查遗留的事项（管理员两步验证、以长度为中心的密码规则、TinyMCE）也在当天一并处理。\n\n**发现的问题与处理**\n\n| 领域 | 内容 | 状态 |\n|------|------|------|\n| 认证 | 为管理员账户新增认证应用两步验证（含恢复码），并在安全设置中加入要求所有管理员完成设置的 `要求管理员启用两步验证` 策略。请参阅[设置管理员两步验证](/zh/docs/admin/security/two-factor-auth/)。 | `已修复（待发布）` |\n| 认证 | 启用或关闭两步验证时，会清理该账户的其他会话。强制策略同样适用于已打开的实时连接和进行中的 MCP 操作；更改密码后，等待中的登录步骤将失效。 | `已修复（待发布）` |\n| 认证 | 新安装服务器的默认密码规则改为至少 12 个字符、不要求组合字符种类（NIST SP 800-63B-4）。安装向导和命令行工具遵循相同规则，现有服务器的规则不变。 | `已修复（待发布）` |\n| 编辑器 | 将群发通知邮件编辑器更换为 Tiptap，并移除了 HTML 文件的可视化编辑器（TinyMCE）。TinyMCE 6 中遗留的未修复漏洞不再产生影响。HTML 文件只能以源码方式编辑。 | `已修复（待发布）` |\n| 权限 | 对演示文稿、表格、自动转换插入的图片，以及相似图片搜索和 AI 回答依据的正文，会检查请求者的权限。Office 预览结果只有创建者才能获取。 | `已修复（待发布）` |\n| 文档转换 | 通过文档中的 TeX 公式可能读取工作文件夹之外的文件。现已禁止读取工作文件夹之外的文件。 | `已修复（待发布）` |\n| 服务器稳定性 | 转换时分段读取文档结构，并限制加密文档的读取大小。外部转换工具在执行前会被标记为内存不足时优先终止的对象。 | `已修复（待发布）` |\n| 记录 | 补充了解除封禁仅部分成功时的处理，以及设置变更审计记录中缺失的项目。 | `已修复（待发布）` |\n| 界面 | 未发送群发邮件草稿就离开时，以及未保存恢复码就离开时，会显示确认窗口；并补充了键盘和屏幕阅读器的无障碍支持。 | `已修复（待发布）` |\n| 认证 | 为每个账户设置认证世代，在结束全部会话、修改密码或更改两步验证之后，旧会话以及由其派生的令牌刷新和应用登录都不再可用；即使删除会话失败也同样生效。 | `已修复（待发布）` |\n| 认证 | 结束全部会话时，也会一并断开通过登录和同意页面连接的 MCP OAuth 连接。用户自行创建的 API 密钥会保留。 | `已修复（待发布）` |\n| 服务器稳定性 | 实时连接的阻断不再因缓慢的连接而延迟，并为加密文档处理设置了并发执行和等待数量的上限。 | `已修复（待发布）` |\n| 认证 | 服务器暂时无法确认登录状态时，不再让用户登出，而是重试。 | `已修复（待发布）` |\n\n**遗留限制**\n\n- 浏览器会先将密码转换为哈希再发送，因此服务器无法直接强制执行密码长度规则。长度和组合规则在界面中检查，常见密码拦截在服务器端进行。\n- 策略应用状态和两步验证的等待状态保存在服务器内存中。重启服务器后，进行中的登录需要从头重新开始。\n\n## 2026-10-23 第 3 轮后续检查\n\n本轮落实了第 2 轮复查遗留的后续项目，以及国际标准文档的建议（NIST SP 800-63B-4 密码标准、OWASP Top 10:2025 A09 安全日志）。权限问题先用在修复前代码上失败的测试加以确认，然后进行了修复；修复版本在重新获取的源代码上重新构建并测试。\n\n**发现的问题与处理**\n\n| 领域 | 内容 | 状态 |\n|------|------|------|\n| 权限 | 文档转换（AI 转换工具、文档转换、Office 预览）会从整个源文件夹获取图片，导致请求转换的用户无法读取的子文件夹中的图片可能进入结果文件。已改为只放入请求者可读取的图片。 | `已修复（待发布）` |\n| 权限 | 文档转换中，通过文档里写入的样式表、封面路径，服务器上其他文件的内容可能进入结果文件。现在会在转换前删除样式表指定和不安全的路径。因此，文档中指定的 CSS 样式不会应用到转换结果。 | `已修复（待发布）` |\n| 权限 | 知识搜索结果和 AI 回答依据仅凭查看权限就显示了文档正文的一部分。现在只有同时拥有查看和下载权限时才显示正文，仅有查看权限时只显示标题和位置。 | `已修复（待发布）` |\n| 权限 | 收藏、Office 预览与在线编辑、编辑历史没有重新确认团队空间系统文件夹的访问边界和当前权限。现在每次请求都会重新确认，编辑历史中的旧内容需要下载权限才能查看。 | `已修复（待发布）` |\n| 权限 | 网站（Web 空间）表格的合计、平均等汇总反映了读取受限列的值，而且仅凭行删除权限就能永久删除。现在不可读取的列不计入汇总，永久删除只能由管理员和部署负责人执行。 | `已修复（待发布）` |\n| 自动化 | 即使文档锁定等操作被拒绝，自动化和 Webhook 仍可能执行。现在只在操作成功时执行。 | `已修复（待发布）` |\n| 设置 | 应用文件夹设置组时，文件夹的知识利用设置可能被清除。现在会保留现有设置。 | `已修复（待发布）` |\n| 认证 | 设置新密码时，会拦截约 2 万个常用或曾泄露的密码（NIST SP 800-63B-4）。适用于注册、密码更改与重置、管理员创建账户与重置密码、命令行工具、安装向导；用现有密码登录不受影响。 | `已修复（待发布）` |\n| 记录 | 管理员更改安全与策略设置、封禁与解除封禁、更改用户权限、创建与删除账户、重置密码、批准与拒绝设备、更改会话与人机验证（CAPTCHA）策略时，会记入审计日志。记录内容包括操作的管理员、时间、访问 IP、变更的项目；密码、密钥等机密值不会记录。 | `已修复（待发布）` |\n| 外部共享 | 修正了界面，使管理员关闭外部共享后，链接创建者仍可查看并删除现有链接。无法创建新链接。 | `已修复（待发布）` |\n| 网页界面 | AI 请求上限、压缩下载等待等新的服务器拒绝原因，现在以用户语言的提示文字显示。 | `已修复（待发布）` |\n| 服务器稳定性 | 打开大文本文件（如大容量 CSV）时会把整个文件加载到内存，多人同时打开时服务器内存可能耗尽。现在超过 16MB 的文件会分段发送。 | `已修复（待发布）` |\n| 服务器稳定性 | 品牌 Logo 和 AI 图片摘要在解码图片前没有检查图片的宽度和高度。现在会先检查尺寸，过大的图片不再解码。 | `已修复（待发布）` |\n| 服务器稳定性 | 处理边界损坏或嵌套极深的邮件的部分代码（当前未使用）没有深度限制，可能无法结束。现在限制了嵌套深度，出错时会停止。 | `已修复（待发布）` |\n| 服务器稳定性 | 文档转换、图片、视频处理程序占用大量内存时，SetFN 服务器可能被代为终止。现在已标记为内存不足时优先终止这些程序。 | `已修复（待发布）` |\n\n**遗留事项**\n\n- 本轮检查遗留的管理员两步验证、以长度为中心的密码规则（新安装默认值）、替换 TinyMCE，已在 [2026-10-24 AI 交叉审查](#_2026-10-24-ai-交叉审查与后续处理)中处理。\n\n## 2026-10-23 第 2 轮复查\n\n第 1 轮修复后，同一天重新检查了整体。再次审查了第 1 轮修复是否有遗漏，并使用 AI（Claude）分领域审查了第 1 轮未涉及的部分（各功能的权限检查范围、输入处理、邮件、Webhook、AI 工具的权限边界、网页界面、机密信息与设置）。发现的问题先用在修复前代码上失败的测试加以确认，然后进行了修复。\n\n**发现的问题与处理**\n\n| 领域 | 内容 | 状态 |\n|------|------|------|\n| 权限 | 在搜索、文件夹树、实时文件、AI 文件工具中，普通用户可以指定管理员区域（所有用户的个人空间）。已改为只有全局管理员才能打开。 | `已修复（待发布）` |\n| 权限 | 文件路径可能越界到名称相似的其他用户的个人空间。已为所有空间的文件访问加入边界检查。 | `已修复（待发布）` |\n| 权限 | 直接查询数据库文件的功能没有路径权限检查，可以打开其他数据库文件。已加入权限检查和危险命令拦截。 | `已修复（待发布）` |\n| 权限 | AI 日程工具没有确认日程所有者；AI 文件工具改为读取名称相似的文件时没有重新检查权限。 | `已修复（待发布）` |\n| 权限 | 补强了个人空间活动记录、空间间复制的源文件权限、按韩文字母表记差异的权限检查，以及收藏、转换状态、任务取消的所有者确认。 | `已修复（待发布）` |\n| 权限 | 网站（Webspace）表的列读写限制没有生效。已改为同时保护已删除的行和作者列。 | `已修复（待发布）` |\n| 权限 | 保存设置时如果缺少 IP 访问限制项，限制可能被关闭。 | `已修复（待发布）` |\n| 数据隔离 | 团队日程列表、收件箱、通知中可能看到其他用户的个人日程。 | `已修复（待发布）` |\n| 服务器稳定性 | 自动补全请求同时到达时服务器可能停止。 | `已修复（待发布）` |\n| 外部请求 | AI 模型连接把普通用户的请求一直转发到管理功能，部分功能可以向服务器内部地址发送请求。也阻止了登录信息被传递给插件的问题。 | `已修复（待发布）` |\n| 内容隔离 | 补强了网站静态文件（XML、XHTML）、文档转换预览、品牌设置值、PDF 转换引擎、登录后跳转地址。 | `已修复（待发布）` |\n| 过载防护 | 把请求大小限制改为按功能路径设定，为慢速请求正文加入时间限制，为并发上传预留存储空间配额，并把 IPv6 请求限制按地址段归并。 | `已修复（待发布）` |\n| 数据保护 | 改为在文字识别（OCR）没有结果时不删除原文件。 | `已修复（待发布）` |\n| 网页界面 | 把邮件撰写器的 HTML 净化改为标准净化工具（DOMPurify），并保护在新窗口打开的链接。 | `已修复（待发布）` |\n| 邮件 | 修改联系人可能影响其他用户的联系人，外部邮件账户可能占用公司内部地址。也阻止了对已停用邮箱的访问，以及对保存在团队空间中的共享邮箱原文文件的访问。 | `已修复（待发布）` |\n| 文件与集成 | 文件保存锁可能连其他用户的同名文件也一并锁住，下载的压缩文件内的名称可能被解压到其他文件夹。工作流集成改为每次重新确认用户，Webhook 令牌在日志中隐去，必须签名的设置也应用于现有 Webhook。 | `已修复（待发布）` |\n| 共享 | 关闭外部共享功能或收回创建者的共享权限后，现有共享链接仍可继续打开，并且可以通过并发请求超过使用次数限制。即使功能已关闭，创建者仍可查看并撤销自己的链接。 | `已修复（待发布）` |\n| 权限 | 一对一和群组聊天室的附件，同一团队的其他用户也可以通过文件功能打开。已改为只有该聊天室的参与者和管理员才能打开。 | `已修复（待发布）` |\n| 权限 | 因无权限而被拒绝的文件夹查询响应中，可能一并包含文件夹内项目的信息。 | `已修复（待发布）` |\n| 权限 | 保存文件和处理审批的请求在返回权限拒绝响应后仍可能被实际执行。现已改为一旦拒绝立即停止处理。 | `已修复（待发布）` |\n| 权限 | 为 AI 工具的文件夹设置查询与更改，以及基于文件内容生成的结果（研究、相似图片、文件夹分析）补强了权限检查。 | `已修复（待发布）` |\n| 设置与机密信息 | 确认仓库中没有机密密钥，密码哈希、令牌签名、邮件账户加密均适当。阻止了 API 说明页面经反向代理对外公开的问题，并删除了未使用的弱加密函数。 | `已修复（待发布）` |\n\n**运维人员须知**\n\n- 如果外部 AI 集成（AP 桥接）使用 `/api/ai-proxy`，需要在服务器和集成端设置相同的 `SETFN_AI_PROXY_TOKEN` 值。从本次修复起，仅凭没有令牌的本地请求无法访问。\n\n## 2026-10-23 发布前全面安全检查\n\n以针对内存不足情况的攻击类型被公开为契机，在发布前重新检查了整个服务器。使用 AI（Claude）分五个领域审查代码，发现的问题在通过代码和测试再次确认后进行了修复。\n\n**检查范围**\n\n- 无需登录即可调用的功能的请求大小和连接时间\n- 一位用户的请求数据可能混入其他用户响应的路径\n- 把不完整的数据当作正常数据保存的路径\n- 请求反复发生时在服务器内存中持续累积的状态\n- 服务器与网页界面库的已知漏洞，文档处理程序 2025 年以后的主要漏洞\n- KISA Boho Nara（보호나라）安全公告 463 条（2025-01-01 ~ 2026-10-22）\n- OWASP Top 10:2025、OWASP ASVS 5.0、NIST SP 800-63B-4、KISA Web 漏洞检查项目\n\n**发现的问题与处理**\n\n| 领域 | 内容 | 状态 |\n|------|------|------|\n| 用户间数据隔离 | 文件名自动补全中可能出现其他用户个人空间的文件名。改为按空间和用户拆分索引，管理员空间仅限管理员查询。 | `已修复（待发布）` |\n| 用户间数据隔离 | 同时查询团队日程和个人日程时，其他用户的个人日程可能混在一起显示。改为每个请求固定日程存储位置。 | `已修复（待发布）` |\n| 用户间数据隔离 | 在回收站中以覆盖方式恢复同名文件时，其他文件的评论和更改记录可能被改变。 | `已修复（待发布）` |\n| 服务器稳定性 | 实时发送搜索结果的过程中如果连接断开，会在响应结束后仍尝试写入记录，可能导致服务器停止。 | `已修复（待发布）` |\n| 服务器稳定性 | 整理了多个任务同时读写实时连接当前界面信息的竞争问题。 | `已修复（待发布）` |\n| 过载防护 | 服务器连接没有时间限制，容易受到大量打开慢速连接并保持不放的攻击。加入了标头接收时间、空闲连接时间和标头大小限制。 | `已修复（待发布）` |\n| 过载防护 | 存在没有请求正文大小限制的功能。为整个 API 设置了默认上限，并为无需登录即可调用的应用登录准备、设备注册确认、安装界面设置了单独的上限。 | `已修复（待发布）` |\n| 过载防护 | 登录失败记录和应用登录等待请求可能无限增长。加入了总数和按访问来源的数量上限。 | `已修复（待发布）` |\n| 过载防护 | 邮件重复处理记录、网站实时订阅、AI 请求并发执行、压缩下载并发任务、文件夹树缓存可能无限增长。已分别加入上限和定期清理。 | `已修复（待发布）` |\n| 数据保护 | 未告知长度的上传可能跳过存储空间配额检查；文档密码设置会原地覆盖文件，失败时可能损坏原文件。已改为边统计接收量边检查配额，文档密码设置和转换结果保存先写入临时文件再替换。 | `已修复（待发布）` |\n| 数据保护 | 过大的专利 XML 可能在被截断处理后删除原文件。已改为超过大小上限即视为失败，并且不删除只解析了一部分的原文件。 | `已修复（待发布）` |\n| 文档处理程序 | LibreOffice 存在 Ubuntu 24.04 中尚未修复的漏洞（CVE-2026-63277）。已改为在用于文档转换的 LibreOffice 配置文件中禁用 Java。 | `已修复（待发布）` |\n| 文档处理程序 | 正在加强处理压缩、图像、文档文件时的大小上限。 | `修复中` |\n| 依赖 | 将 Go 服务器库的 41 项已知漏洞升级到修复版本，并把不再维护的压缩库替换为自有模块。 | `已修复（待发布）` |\n| 依赖 | 将网页界面库（文档编辑器、PDF 查看、Markdown 查看等）严重程度为高及以上的 20 项漏洞升级到修复版本。 | `已修复（待发布）` |\n| 依赖 | HTML 文件编辑器（TinyMCE）的部分漏洞只在更高版本中修复，正在评估切换。邮件编辑器已通过输入净化加以阻止。 | `修复中` |\n| 安全标头 | 禁止把管理员和账户界面嵌入其他站点，并限制了对 API 响应格式的猜测以及传到外部的地址信息。 | `已修复（待发布）` |\n| 认证 | 计划把密码策略改为 NIST 标准（用长度和常见密码拦截代替组合规则），并添加管理员两步验证。 | `计划改进` |\n| 外部公告 | KISA 公告中没有直接影响 SetFN 的公告。根据运行环境可能相关的 32 条已整理为运维人员确认项目。 | `需运维人员处理` |\n\n**修复确认**\n\n每项修复都附带了在修复前代码上会失败的测试。修复后，另外启动了与生产数据隔离的测试服务器，用命令行工具创建管理员和普通用户账户，然后通过实际请求确认了以下内容。\n\n- 其他用户个人空间的文件名不会出现在自动补全中\n- 同时查询团队和个人日程 40 次期间，个人日程不会混入团队列表\n- 对于不结束标头发送的慢速连接，服务器会在超过限制时间后断开\n- 过大的请求和过长的输入在读取正文之前即被拒绝\n- 管理员界面带有防点击劫持标头，而客户网站页面不带\n\n**运维人员须知**\n\n- 新增了[检查服务器安全更新](/zh/docs/security-updates/server-checklist/)。介绍获取 Ubuntu `universe` 软件包安全修复的方法，以及不安装 MuPDF 的原因。\n- 从 Linux 和 Windows 安装文档的推荐软件包中移除了 `mupdf-tools`。\n\n## 2026-10-20 ~ 2026-10-22 权限边界复查\n\n使用 AI（OpenAI Codex）并行复查了权限和共享处理代码，发现的缺陷先用在修复前代码上失败的测试加以确认，然后进行了修复。\n\n| 内容 | 状态 |\n|------|------|\n| 桌面同步列表中包含没有列出权限的文件夹的名称和文件大小的问题 | `已处理` |\n| 共享链接、回收站恢复、文档传输的权限处理缺陷，以及权限拒绝显示为服务器错误（500）的问题 | `已处理` |\n| 已收回的权限可能在实时连接中复活的顺序问题，文件通知的接收人范围 | `已处理` |\n| 在已退出的聊天室中仍能看到迟到的 AI 回复的问题 | `已处理` |\n| 补充文档转换菜单和 OCR 结果保存的权限检查 | `已处理` |\n\n## 2026-10-19 限制 AI 日志原文\n\n缩小了 AI 功能诊断日志的记录范围，避免过多留下请求原文。`已处理`\n\n## 2026-10-13 加强转换与公开 Web 权限\n\n| 内容 | 状态 |\n|------|------|\n| 转换文件夹重新处理功能没有路径权限检查的问题 | `已处理` |\n| 把没有转换设置的文件夹中删除原文件的默认值改为保留 | `已处理` |\n| 加强公开 Web 查看权限和文档历史边界，补强实时连接重新认证的回归问题 | `已处理` |\n\n## 2026-09-25 全方位安全检查\n\n检查了权限、共享、认证、网页界面脚本执行（XSS）、服务器端请求伪造（SSRF）、AI 与工作流工具。向隔离的测试服务器发送真实请求确认后进行了修复。\n\n| 内容 | 状态 |\n|------|------|\n| 加强共享链接令牌的类型、签发者、路径范围验证 | `已处理` |\n| 改为先规范化路径再判定权限，列表查询也应用上级文件夹权限 | `已处理` |\n| 加强 CSRF 例外条件，CORS 来源比较包含端口，更改密码时终止所有会话 | `已处理` |\n| 对 Office 文档的保存和锁定应用路径权限和文件夹策略 | `已处理` |\n| 禁止 AI 工具接收内部参数，对文件创建和覆盖应用权限和编辑锁 | `已处理` |\n| 工作流集成必须使用令牌，对文件工具应用权限检查 | `已处理` |\n| 加强邮件、Markdown、Word 文档显示的 HTML 净化，隔离上传文件的响应 | `已处理` |\n| 为防止账户锁定功能被滥用，添加最近登录成功 IP 的例外 | `已处理` |\n| 加强实时功能中管理员操作（强制退出等）的权限 | `已处理` |\n\n## 相关文档\n\n- [了解安全检查与更新方式](/zh/docs/security-updates/overview/)\n- [主要漏洞检查状态](/zh/docs/security-updates/vulnerability-status/)\n- [检查服务器安全更新](/zh/docs/security-updates/server-checklist/)\n",1793056634584]