Council 098bcfe780 fix(P0): P0-1 idempotent ticket issuance, P0-3 XSS, P0-4 QR secret exception ... P0-1: issueTicket() now checks for existing tickets by (order_id, spec_base_id) before inserting. Prevents duplicate tickets on HTTP retry/multi-instance. P0-3: Removed |raw from simple_desc and content in ticket_detail.html. Prevents stored XSS via malicious admin content injection. P0-4: getQrSecret() now throws exception if VR_TICKET_QR_SECRET is unset, instead of falling back to insecure default key.		2026-04-15 16:59:22 +08:00
..
ticket_detail.html	fix(P0): P0-1 idempotent ticket issuance, P0-3 XSS, P0-4 QR secret exception	2026-04-15 16:59:22 +08:00