From 0910504a468a8cd89ec4eeeee818a915be49a87e Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?=E7=8E=8B=E5=BE=B7=E5=AE=87?= <kvtodev@outlook.com>
Date: Fri, 7 Aug 2026 13:30:04 +0800
Subject: [PATCH] =?UTF-8?q?=E8=A1=A5=E5=85=85=E5=BE=AE=E4=BF=A1=E6=94=AF?=
 =?UTF-8?q?=E4=BB=98=E5=9B=9E=E8=B7=B3=E5=85=B3=E8=81=94=E5=BE=85=E5=8A=9E?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

说明小程序支付期间切号风险较低
记录未来跨 WebView 恢复所需的账号订单关联校验
---
 .../platform-entry/usePlatformProfileCenterController.ts       | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/src/components/platform-entry/usePlatformProfileCenterController.ts b/src/components/platform-entry/usePlatformProfileCenterController.ts
index 4a6206cc4..336e6f5ca 100644
--- a/src/components/platform-entry/usePlatformProfileCenterController.ts
+++ b/src/components/platform-entry/usePlatformProfileCenterController.ts
@@ -770,6 +770,9 @@ export function usePlatformProfileCenterController({
       return false;
     }
 
+    // TODO：小程序支付回跳通常仍是同一账号，当前风险很低；若以后支持支付期间切号或
+    // 跨 WebView 恢复，应持久化并校验 requestId + orderId + ownerUserId 后再采纳无
+    // 内存 pending order 的 hash。后端订单 owner 校验继续作为最终安全边界。
     const account = pendingOrder?.account ?? captureAccountLifecycle();
     if (!account.ownerUserId || !isAccountLifecycleCurrent(account)) {
       return false;