@pubinfo/module-rbac 2.1.0 → 2.1.2

package/dist/{ResourceEdit-DmhCeCzZ.js → ResourceEdit-D59JUDvG.js}

@@ -1,4 +1,4 @@
-import { _ as f } from "./ResourceEdit.vue_vue_type_script_setup_true_lang-Bf5bFQcG.js";
+import { _ as f } from "./ResourceEdit.vue_vue_type_script_setup_true_lang-IWn27Vz1.js";
 export {
   f as default
 };

package/dist/{ResourceEdit.vue_vue_type_script_setup_true_lang-Bf5bFQcG.js → ResourceEdit.vue_vue_type_script_setup_true_lang-IWn27Vz1.js}

@@ -7,7 +7,7 @@ import { u as C } from "./index.js";
 import { d as Ue, p as Ee, e as Ce } from "./ziyuanjiekou-BC65-bFK.js";
 import { D as Te, b as Ae } from "./enum-DkSNwGbC.js";
 import { r as D, A as I, R as Me } from "./enum-D5iPiZiT.js";
-import { u as Oe, M as Ve, d as Le } from "./MetaForm-CdjGvTzO.js";
+import { u as Oe, M as Ve, d as Le } from "./MetaForm-BMPtZc0g.js";
 import { _ as xe } from "./DynamicRoutesForm.vue_vue_type_script_setup_true_lang-bEqJ03T_.js";
 import { _ as ke } from "./IconSelect.vue_vue_type_script_setup_true_lang-D450SiKg.js";
 import we from "./LayoutForm-Pv6UyKl3.js";

package/dist/{index-CW5BpDeG.js → index-DQhQqT_Z.js}

@@ -7,7 +7,7 @@ import { useAuth as j, PubinfoIcon as I, RESOURCE_TYPE as T } from "pubinfo";
 import "./index.js";
 import { b as G, c as J } from "./ziyuanjiekou-BC65-bFK.js";
 import { _ as Q } from "./ImportExport.vue_vue_type_script_setup_true_lang-CV0DrMvw.js";
-import { _ as W } from "./ResourceEdit.vue_vue_type_script_setup_true_lang-Bf5bFQcG.js";
+import { _ as W } from "./ResourceEdit.vue_vue_type_script_setup_true_lang-IWn27Vz1.js";
 import { _ as Z } from "./RoleRelation.vue_vue_type_script_setup_true_lang-BjEOlM2g.js";
 import { r as L, A as t, R as ee } from "./enum-D5iPiZiT.js";
 import { c as te } from "./cloneDeep-BOLZdR62.js";

package/dist/index.js

@@ -75,7 +75,7 @@ import './index17.css';const wa = {
     "src/views/page_w_setting/index.vue": () => import("./index-XhYtVVT9.js"),
     "src/views/position/index.vue": () => import("./index-iBmBJd50.js"),
     "src/views/region/index.vue": () => import("./index-BhZNbJp6.js"),
-    "src/views/resource/index.vue": () => import("./index-CW5BpDeG.js"),
+    "src/views/resource/index.vue": () => import("./index-DQhQqT_Z.js"),
     "src/views/role/index.vue": () => import("./index-ChWnVs6j.js"),
     "src/views/role_group/index.vue": () => import("./index-CJQB8KAz.js"),
     "src/views/safe_setting/index.vue": () => import("./index-VZuizuKs.js"),
@@ -103,8 +103,8 @@ import './index17.css';const wa = {
     "src/views/resource/components/IconSelect.vue": () => import("./IconSelect-DtNpk3Rj.js"),
     "src/views/resource/components/ImportExport.vue": () => import("./ImportExport-DAe_Sl13.js"),
     "src/views/resource/components/LayoutForm.vue": () => import("./LayoutForm-Pv6UyKl3.js"),
-    "src/views/resource/components/MetaForm.vue": () => import("./MetaForm-CdjGvTzO.js").then((e) => e.a),
-    "src/views/resource/components/ResourceEdit.vue": () => import("./ResourceEdit-DmhCeCzZ.js"),
+    "src/views/resource/components/MetaForm.vue": () => import("./MetaForm-BMPtZc0g.js").then((e) => e.a),
+    "src/views/resource/components/ResourceEdit.vue": () => import("./ResourceEdit-D59JUDvG.js"),
     "src/views/resource/components/RoleRelation.vue": () => import("./RoleRelation-BuqK0cnl.js"),
     "src/views/role/components/ResourceRelation.vue": () => import("./ResourceRelation-qhIdXLAy.js"),
     "src/views/role/components/drawerRole.vue": () => import("./drawerRole-CfJjf3v_.js"),
@@ -1455,7 +1455,7 @@ const Qd = {
   children: [
     {
       path: "resource",
-      component: () => import("./index-CW5BpDeG.js"),
+      component: () => import("./index-DQhQqT_Z.js"),
       name: "Resource",
       meta: {
         title: "资源管理",

package/dist/utils/validateObjectStructure.d.ts

@@ -0,0 +1,11 @@
+export interface ValidateOptions {
+    /** 允许的最大嵌套层级（含根层） */
+    maxDepth?: number;
+    /** 每一层最多 key 数 */
+    maxKeysPerLevel?: number;
+}
+export interface ValidateResult {
+    valid: boolean;
+    errors: string[];
+}
+export declare function validateObjectStructure(obj: any, options?: ValidateOptions): ValidateResult;

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@pubinfo/module-rbac",
   "type": "module",
-  "version": "2.1.0",
+  "version": "2.1.2",
   "exports": {
     ".": {
       "types": "./dist/index.d.ts",
@@ -24,7 +24,7 @@
     "@pubinfo/pro-components": "^1.8.0",
     "alova": "^3.3.4",
     "ant-design-vue": "^4.2.6",
-    "pubinfo": "2.1.0"
+    "pubinfo": "2.1.2"
   },
   "dependencies": {
     "@destyler/color-picker": "^0.1.0",
@@ -49,7 +49,7 @@
     "alova": "^3.3.4",
     "ant-design-vue": "^4.2.6",
     "type-fest": "^4.41.0",
-    "pubinfo": "2.1.0"
+    "pubinfo": "2.1.2"
   },
   "scripts": {
     "dev": "pubinfo build -w --sourcemap",

package/src/components/JsonEditorModal/index.vue

@@ -2,6 +2,7 @@
 import { useToggle } from '@vueuse/core';
 import { message } from 'ant-design-vue';
 import JsonEditorVue from 'json-editor-vue';
+import { validateObjectStructure } from '@/utils/validateObjectStructure';
 
 defineOptions({
   name: 'JsonEditorModal',
@@ -20,10 +21,14 @@ watchEffect(() => {
 function onFinish() {
   try {
     const parseValue = JSON.parse(inputValue.value);
-    if (parseValue) {
-      modelValue.value = parseValue;
-      toggle(false);
+    const { valid, errors } = validateObjectStructure(parseValue, { maxDepth: 2, maxKeysPerLevel: 8 });
+    if (!valid || !parseValue) {
+      message.info(errors[0]);
+      return;
     }
+
+    modelValue.value = parseValue;
+    toggle(false);
   }
   catch (_) {
     message.info('JSON数据格式错误');

package/src/utils/validateObjectStructure.ts

@@ -0,0 +1,47 @@
+export interface ValidateOptions {
+  /** 允许的最大嵌套层级（含根层） */
+  maxDepth?: number
+  /** 每一层最多 key 数 */
+  maxKeysPerLevel?: number
+}
+
+export interface ValidateResult {
+  valid: boolean
+  errors: string[]
+}
+
+export function validateObjectStructure(
+  obj: any,
+  options: ValidateOptions = {},
+): ValidateResult {
+  const { maxDepth = 3, maxKeysPerLevel = 10 } = options;
+  const errors: string[] = [];
+
+  function traverse(value: any, depth: number, path: string) {
+    if (depth > maxDepth) {
+      errors.push(`对象嵌套层级超过限制，最大允许 ${maxDepth} 层。问题位置: ${path}`);
+      return;
+    }
+
+    if (value && typeof value === 'object' && !Array.isArray(value)) {
+      const keys = Object.keys(value);
+
+      if (keys.length > maxKeysPerLevel) {
+        errors.push(
+          `对象包含过多字段（${keys.length} 个），最大允许 ${maxKeysPerLevel} 个。位置: ${path}`,
+        );
+      }
+
+      keys.forEach((key) => {
+        traverse(value[key], depth + 1, `${path}.${key}`);
+      });
+    }
+  }
+
+  traverse(obj, 1, 'root');
+
+  return {
+    valid: errors.length === 0,
+    errors,
+  };
+}