mirror of
https://github.com/affaan-m/everything-claude-code.git
synced 2026-04-09 10:53:34 +08:00
docs(zh-CN): sync Chinese docs with latest upstream changes (#304)
* docs(zh-CN): sync Chinese docs with latest upstream changes * update --------- Co-authored-by: neo <neo.dowithless@gmail.com>
This commit is contained in:
34
docs/zh-CN/rules/swift/security.md
Normal file
34
docs/zh-CN/rules/swift/security.md
Normal file
@@ -0,0 +1,34 @@
|
||||
---
|
||||
paths:
|
||||
- "**/*.swift"
|
||||
- "**/Package.swift"
|
||||
---
|
||||
|
||||
# Swift 安全
|
||||
|
||||
> 此文件扩展了 [common/security.md](../common/security.md),并包含 Swift 特定的内容。
|
||||
|
||||
## 密钥管理
|
||||
|
||||
* 使用 **Keychain Services** 处理敏感数据(令牌、密码、密钥)—— 切勿使用 `UserDefaults`
|
||||
* 使用环境变量或 `.xcconfig` 文件来管理构建时的密钥
|
||||
* 切勿在源代码中硬编码密钥 —— 反编译工具可以轻易提取它们
|
||||
|
||||
```swift
|
||||
let apiKey = ProcessInfo.processInfo.environment["API_KEY"]
|
||||
guard let apiKey, !apiKey.isEmpty else {
|
||||
fatalError("API_KEY not configured")
|
||||
}
|
||||
```
|
||||
|
||||
## 传输安全
|
||||
|
||||
* 默认强制执行 App Transport Security (ATS) —— 不要禁用它
|
||||
* 对关键端点使用证书锁定
|
||||
* 验证所有服务器证书
|
||||
|
||||
## 输入验证
|
||||
|
||||
* 在显示之前清理所有用户输入,以防止注入攻击
|
||||
* 使用带验证的 `URL(string:)`,而不是强制解包
|
||||
* 在处理来自外部源(API、深度链接、剪贴板)的数据之前,先进行验证
|
||||
Reference in New Issue
Block a user