关键漏洞信息 Fix Summary Commit: Authors: and Date: Last week Commit Message: Security Changes Canvas Host and Telegram Webhook Defaults: - Default bind changed from (all interfaces) to (loopback only) to prevent unintended network exposure. - Webhook Override: Restored to allow explicit configuration while retaining loopback defaults. Documentation Telegram documentation was updated to reflect new settings and options. Configuration Updates Added field to configure custom webhook hosts, defaulting to . Code Changes Altered and values in various configuration files. Tests were updated to accommodate these changes.