v0.2测试

frontend/assets/js/common.js

@@ -9,8 +9,8 @@
  * 版权所有 © Sea Network Technology Studio
  */
 
-// API基础地址
-const API_BASE_URL = window.API_BASE_URL || 'http://localhost:8000';
+// API 使用相对路径，由 Nginx 反向代理 /api/ 到后端
+const API_BASE_URL = '';
 const JWT_STORAGE_KEY = 'class_system_token';
 const USER_STORAGE_KEY = 'class_system_user';
 
@@ -54,23 +54,24 @@ function checkAuth() {
 // API请求封装
 async function apiRequest(url, options = {}) {
     const token = getToken();
-    
     const headers = {
         'Content-Type': 'application/json',
         ...options.headers
     };
-    
     if (token) {
         headers['Authorization'] = `Bearer ${token}`;
     }
     
+    // 确保 url 以 /api/ 开头
+    const fullUrl = url.startsWith('/api/') ? url : `/api${url}`;
+    
     const config = {
         ...options,
         headers
     };
     
     try {
-        const response = await fetch(`${API_BASE_URL}${url}`, config);
+        const response = await fetch(fullUrl, config);
         const data = await response.json();
         
         if (response.status === 401) {
@@ -78,7 +79,6 @@ async function apiRequest(url, options = {}) {
             window.location.href = '/index.php';
             return null;
         }
-        
         return data;
     } catch (error) {
         console.error('API请求错误:', error);
@@ -121,7 +121,6 @@ function showToast(message, type = 'success') {
     toast.className = `toast toast-${type}`;
     toast.textContent = message;
     document.body.appendChild(toast);
-    
     setTimeout(() => {
         toast.remove();
     }, 3000);
@@ -156,10 +155,8 @@ function getStatusBadge(status, type = 'homework') {
             'leave': '请假'
         }
     };
-    
     const texts = statusMap[type] || statusMap.homework;
     const text = texts[status] || status;
-    
     let className = 'status-badge ';
     switch (status) {
         case 'submitted':
@@ -179,7 +176,6 @@ function getStatusBadge(status, type = 'homework') {
         default:
             className += 'status-not_submitted';
     }
-    
     return `<span class="${className}">${text}</span>`;
 }
 
@@ -216,7 +212,6 @@ async function changePassword(newPassword) {
         old_password: newPassword,
         new_password: newPassword
     });
-    
     if (res && res.success) {
         showToast('密码修改成功，请重新登录');
         setTimeout(() => logout(), 1500);
@@ -226,17 +221,25 @@ async function changePassword(newPassword) {
     }
 }
 
+// HTML转义
+function escapeHtml(str) {
+    if (!str) return '';
+    return str.replace(/[&<>]/g, function(m) {
+        if (m === '&') return '&amp;';
+        if (m === '<') return '&lt;';
+        if (m === '>') return '&gt;';
+        return m;
+    });
+}
+
 // 页面加载时初始化
 document.addEventListener('DOMContentLoaded', () => {
     loadUserInfo();
-    
     const logoutBtn = document.getElementById('logoutBtn');
     if (logoutBtn) {
         logoutBtn.addEventListener('click', logout);
     }
-    
-    // 学生端检查强制修改密码
-    if (window.location.pathname.includes('/student/')) {
+    if (window.location.pathname.includes('/student/') || window.location.pathname.includes('/parent/')) {
         checkNeedChangePassword();
     }
 });