lzt/new-api
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
5,690 Commits 1 Branch 0 Tags
30f585822b9089b254f0b1b33ba3f8044017184d
Commit Graph

2 Commits

Author SHA1 Message Date
CaIon a7c38ec851 fix: add PaymentProvider field to prevent cross-gateway callback attacks 
EPay allows users to switch payment methods (e.g. wxpay→alipay) during
checkout, causing callback rejection. Replace fragile blocklist guard
with a PaymentProvider field on TopUp and SubscriptionOrder that
identifies which gateway created the order.
 2026-04-24 22:16:16 +08:00
Seefs f995a868e4 Merge pull request #4089 from seefs001/feature/waffo-pay 
rafactor: payment
 2026-04-18 14:22:54 +08:00