fix(规则脚本): 规则引擎 Groovy 脚本注入导致远程代码执行漏洞修复

vue/src/lang/en-US/common.json

@@ -132,5 +132,8 @@
     "batchCancelAuth": "Batch Cancel Authorization",
     "cancelAuth": "Cancel Authorization",
     "clean": "Clear",
-    "cleanSuccess": "Clear Successful"
+    "cleanSuccess": "Clear Successful",
+    "forceChangePwdTitle": "Change the default password",
+    "forceChangePwdTip": "This account is still using the factory default password, which is public and trivially guessable. To keep the platform and its devices safe, set a new password now. You will need to sign in again afterwards.",
+    "forceChangePwdConfirm": "Change password and sign in again"
 }

vue/src/lang/index.js

@@ -25,11 +25,24 @@ const i18n = new VueI18n({
 locale.use(Element, {
   i18n: (key, value) => i18n.t(key, value),
 });
-listLanguage({ pageNum: 1, pageSize: 1000 }).then((res) => {
-  res.rows.forEach((row) => {
-    if (langs[row.language]) langs[row.language].language = row.langName;
-  });
-});
+let languageNamesLoaded = false;
+let languageNamesRequest;
+function loadLanguageNames() {
+  if (languageNamesLoaded) return Promise.resolve();
+  if (!languageNamesRequest) {
+    languageNamesRequest = listLanguage({ pageNum: 1, pageSize: 1000 }).then((res) => {
+      res.rows.forEach((row) => {
+        if (langs[row.language]) langs[row.language].language = row.langName;
+      });
+      languageNamesLoaded = true;
+    }).catch(() => {
+      // Built-in translations remain available if optional display names cannot load.
+    }).finally(() => {
+      languageNamesRequest = undefined;
+    });
+  }
+  return languageNamesRequest;
+}
 
 function getJson(contexts) {
   let json = {};
@@ -40,4 +53,4 @@ function getJson(contexts) {
 }
 
 // 导出langs 给切换语言的时候用
-export { i18n, langs };
+export { i18n, langs, loadLanguageNames };

vue/src/lang/zh-CN/common.json

@@ -132,5 +132,8 @@
   "batchCancelAuth": "批量取消授权",
   "cancelAuth": "取消授权",
   "clean": "清空",
-  "cleanSuccess": "清空成功"
+  "cleanSuccess": "清空成功",
+  "forceChangePwdTitle": "请修改初始密码",
+  "forceChangePwdTip": "检测到当前账号仍在使用出厂默认口令，该口令已公开且极易被爆破。为保障平台与设备安全，请立即设置新密码，修改后需要重新登录。",
+  "forceChangePwdConfirm": "确认修改并重新登录"
 }