Function checkSecurityConfig

scripts/security-check.js:119–161

()

// 检查开发环境安全配置
function checkSecurityConfig() {
  BuildLogger.log('\n🔧 安全配置检查:\n');
  
  // 检查Helmet配置
  const serverPath = path.join(__dirname, '../server.js');
  if (fs.existsSync(serverPath)) {
    const serverContent = fs.readFileSync(serverPath, 'utf8');
    if (serverContent.includes('helmet')) {
      BuildLogger.success(' Helmet安全头已配置');
    } else {
      BuildLogger.warn('  建议添加Helmet安全头');
    }
  }

  // 检查CORS配置
  if (fs.existsSync(serverPath)) {
    const serverContent = fs.readFileSync(serverPath, 'utf8');
    if (serverContent.includes('cors')) {
      BuildLogger.success(' CORS配置已设置');
    } else {
      BuildLogger.warn('  建议配置CORS');
    }
  }

  // 检查Content Security Policy
  const htmlFiles = [
    'index.html',
    'src/giffgaff/giffgaff_modular.html',
    'src/simyo/simyo_modular.html'
  ];

  htmlFiles.forEach(file => {
    const filePath = path.join(__dirname, '..', file);
    if (fs.existsSync(filePath)) {
      const content = fs.readFileSync(filePath, 'utf8');
      if (content.includes('Content-Security-Policy')) {
        BuildLogger.success(` ${file} 已配置CSP`);
      } else {
        BuildLogger.warn(`  ${file} 建议添加CSP配置`);
      }
    }
  });
}

// 主函数
function main() {