包装器间隙: 可绕过配方限速器+工作程序不安全,多编辑在崩溃时会损坏文件,__main__ Typer/遗留分支计费给 LLM

recipe/serve.py:779 — bucket id is untrusted client header

class RateLimitMiddleware(BaseHTTPMiddleware): async def dispatch(self, request, call_next): if rate_limiter is None: return await call_next(request) if request.url.path in rate_limit_exempt: return await call_next(request) # Attacker rotates X-API-Key each request → each value gets its own bucket # …