902d2782cf
Key features implemented: - Updated .gitignore to include additional cache and coverage directories (.mypy_cache/, .pytest_cache/, coverage/, htmlcov/) - Enhanced XSS protection in pkg-manager plugin by adding HTML escaping for all user data in page rendering functions - Improved PL injection security in plugin-loader with enhanced static source code analysis including base64 decoding checks and string concatenation bypass detection - Strengthened configuration file loading security using ast.literal_eval for safe parsing and stricter code execution prevention - Added comprehensive dangerous pattern checks in PL injection static analysis to prevent various bypass techniques The updates focus on security hardening across the plugin system, particularly addressing input sanitization and code injection vulnerabilities while expanding the project's ignore patterns for better repository cleanliness.
plugin-loader 插件加载器
核心插件，负责扫描、加载和管理所有其他插件。
功能
- 自动扫描
store/目录 - 动态加载
main.py并调用New()获取实例 - 解析
manifest.json获取插件元数据 - 自动扫描插件能力（AST 分析）
- 按依赖关系排序加载顺序
- 关联能力提供者与消费者
使用
无需手动使用，框架启动时自动加载。