mirror of
https://github.com/affaan-m/everything-claude-code.git
synced 2026-03-30 13:43:26 +08:00
feat: add Chinese (zh-CN) translation for rules/common
- Add rules/zh/ directory with complete Chinese translations - Translate all 10 common rule files: - coding-style.md - security.md - testing.md - git-workflow.md - performance.md - patterns.md - hooks.md - agents.md - development-workflow.md - code-review.md - Add README.md for the zh directory explaining structure and installation - Maintain consistent formatting with original English versions - Keep technical terms and code examples in English where appropriate
This commit is contained in:
29
rules/zh/security.md
Normal file
29
rules/zh/security.md
Normal file
@@ -0,0 +1,29 @@
|
||||
# 安全指南
|
||||
|
||||
## 强制安全检查
|
||||
|
||||
在任何提交之前:
|
||||
- [ ] 无硬编码密钥(API 密钥、密码、令牌)
|
||||
- [ ] 所有用户输入已验证
|
||||
- [ ] SQL 注入防护(参数化查询)
|
||||
- [ ] XSS 防护(净化 HTML)
|
||||
- [ ] CSRF 保护已启用
|
||||
- [ ] 认证/授权已验证
|
||||
- [ ] 所有端点启用速率限制
|
||||
- [ ] 错误消息不泄露敏感数据
|
||||
|
||||
## 密钥管理
|
||||
|
||||
- 永远不要在源代码中硬编码密钥
|
||||
- 始终使用环境变量或密钥管理器
|
||||
- 启动时验证所需的密钥是否存在
|
||||
- 轮换任何可能已暴露的密钥
|
||||
|
||||
## 安全响应协议
|
||||
|
||||
如果发现安全问题:
|
||||
1. 立即停止
|
||||
2. 使用 **security-reviewer** 代理
|
||||
3. 在继续之前修复关键问题
|
||||
4. 轮换任何已暴露的密钥
|
||||
5. 审查整个代码库中的类似问题
|
||||
Reference in New Issue
Block a user