yoge ac078a16bc fix: pin go directive to 1.20, add user ownership check on GetPDFTask ...

- Downgrade go directive in go.mod from 1.23.0 back to 1.20 to match
  Docker builder image (golang:1.20-alpine); re-run go mod tidy with
  go1.20 (via gvm) to keep go.sum consistent
- GetPDFTask now verifies callerUserID matches task.UserID to prevent
  cross-user data exposure of PDF page content

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

2026-03-31 14:52:20 +08:00

10 KiB

Raw Blame History

View Raw