diff --git a/web-front/src/views/Playground.vue b/web-front/src/views/Playground.vue
index 073f936..d68b068 100644
--- a/web-front/src/views/Playground.vue
+++ b/web-front/src/views/Playground.vue
@@ -531,6 +531,7 @@
 <script>
 import { ref, computed, onMounted, onUnmounted, nextTick, watch } from 'vue';
 import { ElMessage, ElMessageBox } from 'element-plus';
+import { Lock } from '@element-plus/icons-vue';
 import { useMagicKeys, useFullscreen, useEventListener } from '@vueuse/core';
 import { Splitpanes, Pane } from 'splitpanes';
 import 'splitpanes/dist/splitpanes.css';
@@ -545,7 +546,8 @@ export default {
     MonacoEditor,
     JsonViewer,
     Splitpanes,
-    Pane
+    Pane,
+    Lock
   },
   setup() {
     const editorRef = ref(null);
diff --git a/web-service/src/main/java/cn/qaiu/lz/web/controller/PlaygroundApi.java b/web-service/src/main/java/cn/qaiu/lz/web/controller/PlaygroundApi.java
index 58a0858..9a9a539 100644
--- a/web-service/src/main/java/cn/qaiu/lz/web/controller/PlaygroundApi.java
+++ b/web-service/src/main/java/cn/qaiu/lz/web/controller/PlaygroundApi.java
@@ -150,18 +150,43 @@ public class PlaygroundApi {
      */
     private String getClientId(HttpServerRequest request) {
         // 优先使用Cookie中的session id，否则使用IP
-        String cookie = request.getHeader("Cookie");
-        if (cookie != null && cookie.contains("playground_session=")) {
-            String sessionId = cookie.substring(cookie.indexOf("playground_session=") + 19);
-            int endIndex = sessionId.indexOf(";");
-            if (endIndex > 0) {
-                sessionId = sessionId.substring(0, endIndex);
-            }
+        String sessionId = extractSessionIdFromCookie(request);
+        if (sessionId != null) {
             return sessionId;
         }
         return getClientIp(request);
     }
 
+    /**
+     * 从Cookie中提取session ID
+     */
+    private String extractSessionIdFromCookie(HttpServerRequest request) {
+        String cookie = request.getHeader("Cookie");
+        if (cookie == null || !cookie.contains("playground_session=")) {
+            return null;
+        }
+
+        try {
+            final String SESSION_KEY = "playground_session=";
+            int startIndex = cookie.indexOf(SESSION_KEY);
+            if (startIndex == -1) {
+                return null;
+            }
+
+            startIndex += SESSION_KEY.length();
+            int endIndex = cookie.indexOf(";", startIndex);
+            
+            if (endIndex > startIndex) {
+                return cookie.substring(startIndex, endIndex).trim();
+            } else {
+                return cookie.substring(startIndex).trim();
+            }
+        } catch (Exception e) {
+            log.warn("Failed to extract session ID from cookie", e);
+            return null;
+        }
+    }
+
     /**
      * 检查是否已认证
      */
@@ -379,21 +404,21 @@ public class PlaygroundApi {
             // 检查访问权限
             ensurePlaygroundAccess(ctx);
 
-            try (InputStream inputStream = getClass().getClassLoader()
-                    .getResourceAsStream("custom-parsers/types.js")) {
+            InputStream inputStream = getClass().getClassLoader()
+                    .getResourceAsStream("custom-parsers/types.js");
 
             if (inputStream == null) {
                 ResponseUtil.fireJsonResultResponse(response, JsonResult.error("types.js文件不存在"));
                 return;
             }
 
-            String content = new BufferedReader(new InputStreamReader(inputStream, StandardCharsets.UTF_8))
-                    .lines()
-                    .collect(Collectors.joining("\n"));
-
-            response.putHeader("Content-Type", "text/javascript; charset=utf-8")
-                    .end(content);
+            try (inputStream) {
+                String content = new BufferedReader(new InputStreamReader(inputStream, StandardCharsets.UTF_8))
+                        .lines()
+                        .collect(Collectors.joining("\n"));
 
+                response.putHeader("Content-Type", "text/javascript; charset=utf-8")
+                        .end(content);
             }
         } catch (IllegalStateException e) {
             log.error("访问Playground失败", e);