修复了一些已知问题

frontend/src/pages/ApiIntegration.tsx

@@ -132,6 +132,7 @@ const endpointGroups = [
     title: '容器',
     endpoints: [
       ['GET', '/api/v1/containers', '容器列表'],
+      ['POST', '/api/v1/containers/list', '容器列表（兼容旧接口）'],
       ['POST', '/api/v1/containers', '创建容器'],
       ['GET', '/api/v1/containers/{id|uuid|name}', '容器详情'],
       ['POST', '/api/v1/containers/{id}/start', '开机'],
@@ -472,8 +473,9 @@ export default function ApiIntegration() {
         {showDocs && (
           <div className="space-y-6 p-5">
             <div className="rounded-lg bg-gray-900 p-4 font-mono text-xs text-gray-100">
-              <div>curl -H "X-API-Key: clicd_sk_xxxx" {BASE_URL}/api/v1/containers</div>
-              <div className="mt-2 text-gray-400">curl -H "Authorization: Bearer clicd_sk_xxxx" {BASE_URL}/api/v1/dashboard</div>
+              <div>curl -X GET {BASE_URL}/api/v1/containers -H "X-API-Key: clicd_sk_xxxx"</div>
+              <div className="mt-2 text-gray-400">curl -X GET {BASE_URL}/api/v1/dashboard -H "Authorization: Bearer clicd_sk_xxxx"</div>
+              <div className="mt-2 text-amber-300">旧版 /api/containers/list 已兼容，但新接入请使用 GET /api/v1/containers</div>
             </div>
 
             {endpointGroups.map(group => (

frontend/src/pages/ContainerDetail.tsx

@@ -452,10 +452,10 @@ export default function ContainerDetail() {
     const digits = '23456789'
     const symbols = '!@#$%*-_+='
     const all = letters + digits + symbols
-    const pick = (chars: string) => chars[Math.floor(Math.random() * chars.length)]
+    const pick = (chars: string) => chars[secureRandomInt(chars.length)]
     let password = pick(letters) + pick(digits)
     while (password.length < 16) password += pick(all)
-    setResetPasswordDraft(password.split('').sort(() => Math.random() - 0.5).join(''))
+    setResetPasswordDraft(secureShuffle(password.split('')).join(''))
     setResetPasswordResult('')
   }
 
@@ -2054,6 +2054,32 @@ function TrafficBar({ container }: { container: Container }) {
   )
 }
 
+function secureRandomInt(maxExclusive: number) {
+  if (!Number.isSafeInteger(maxExclusive) || maxExclusive <= 0) {
+    throw new Error('invalid random range')
+  }
+  const values = new Uint32Array(1)
+  const maxUint32 = 0x100000000
+  const limit = Math.floor(maxUint32 / maxExclusive) * maxExclusive
+  let value = 0
+  do {
+    crypto.getRandomValues(values)
+    value = values[0]
+  } while (value >= limit)
+  return value % maxExclusive
+}
+
+function secureShuffle<T>(items: T[]) {
+  const next = [...items]
+  for (let i = next.length - 1; i > 0; i--) {
+    const j = secureRandomInt(i + 1)
+    const value = next[i]
+    next[i] = next[j]
+    next[j] = value
+  }
+  return next
+}
+
 function getTemplateIcon(id: string): ReactNode {
   const size = 'w-6 h-6'
   id = id.startsWith('kvm-') ? id.slice(4) : id