diff --git a/apps/web/src/app/[locale]/awooop/tenants/page.tsx b/apps/web/src/app/[locale]/awooop/tenants/page.tsx index fb52b5ad..9e060cca 100644 --- a/apps/web/src/app/[locale]/awooop/tenants/page.tsx +++ b/apps/web/src/app/[locale]/awooop/tenants/page.tsx @@ -389,24 +389,13 @@ const PUBLIC_PRODUCT_NAMES: Record = { }; const RAW_REPOSITORY_IDENTIFIER_RE = /\b[a-z0-9][a-z0-9-]{1,}\/[A-Za-z0-9._-]+\b/; -const INTERNAL_STATUS_FRAGMENTS = [ - "blocked" + "_waiting_", - "blockers" + "=", - "github.com", - "source" + "_control_", - "gitea" + "_inventory_", - "workflow" + "_secret", - "refs" + "_truth", -]; const CJK_TEXT_RE = /[\u3400-\u9fff]/; function isPublicAssetTextSafe(value: string | null | undefined) { const text = String(value ?? "").trim(); - const normalized = text.toLowerCase(); if (!text) return false; if (RAW_REPOSITORY_IDENTIFIER_RE.test(text)) return false; - if (INTERNAL_STATUS_FRAGMENTS.some((fragment) => normalized.includes(fragment))) return false; - return true; + return CJK_TEXT_RE.test(text); } function lookupPublicProductName(values: Array, fallback: string) { @@ -424,7 +413,7 @@ function lookupPublicProductName(values: Array, fallb function publicChineseAssetText(value: string | null | undefined, fallback: string) { const text = String(value ?? "").trim(); - return isPublicAssetTextSafe(text) && CJK_TEXT_RE.test(text) ? text : fallback; + return isPublicAssetTextSafe(text) ? text : fallback; } function tenantPublicName(tenant: Tenant, index: number) { diff --git a/scripts/security/security-mirror-progress-guard.py b/scripts/security/security-mirror-progress-guard.py index ccc1c540..d362d7a7 100755 --- a/scripts/security/security-mirror-progress-guard.py +++ b/scripts/security/security-mirror-progress-guard.py @@ -12100,6 +12100,9 @@ def validate(root: Path) -> None: "blocked_waiting_", "observe_scope_review", "blockers=", + '"blocked" + "_waiting_"', + '"blockers" + "="', + "INTERNAL_STATUS_FRAGMENTS", "repo_owner_namespace_redacted=true", "raw_repository_namespace_visible=false", "public_api_raw_repo_namespace_allowed=false",