q
d1fa787bef
fix(uc/qk): improve directory download with cookie, transfer fallback and URL-safe param encoding
...
- Preserve download cookie for UC/Quark needDownloader flows and disable browser/copy when required
- Quark: share-link first, transfer only on size limit (23018), reuse savedFileCache/search_exit
- Propagate auth to subdirectory parser URLs; switch path params to URL-safe Base64 (no double encode)
- Bump version to 0.4.2
Fixes #205
Co-authored-by: Cursor <cursoragent@cursor.com >
2026-07-26 16:16:51 +08:00
dependabot[bot]
8d419d3265
build(deps): bump axios
...
Bumps the npm_and_yarn group with 1 update in the /web-front directory: [axios](https://github.com/axios/axios ).
Updates `axios` from 1.16.1 to 1.18.0
- [Release notes](https://github.com/axios/axios/releases )
- [Changelog](https://github.com/axios/axios/blob/v1.x/CHANGELOG.md )
- [Commits](https://github.com/axios/axios/compare/v1.16.1...v1.18.0 )
---
updated-dependencies:
- dependency-name: axios
dependency-version: 1.18.0
dependency-type: direct:production
dependency-group: npm_and_yarn
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-07-21 07:29:38 +00:00
q
b70e30796f
ci: package fuller jre for native builds
2026-07-19 09:57:31 +08:00
q
d3ef521773
fix: support donated auth for 123 directory downloads
2026-07-19 09:39:55 +08:00
q
2fde421169
chore: bump version to 0.3.9
2026-07-19 01:11:57 +08:00
q
3494271150
chore: bump version to 0.3.8
2026-07-19 00:55:54 +08:00
q
5e20ed5050
fix: 123网盘(YE)支持authorization别名配置并修复auth临时参数登录被覆盖问题, 更新README认证说明, bump version to 0.3.7
...
引用 #201 #198 #116
说明: 123解析仅限于本地部署(可Windows一键运行 run.bat),公共/云端服务因风控限制不保证可用
2026-07-18 12:28:00 +08:00
yukaidi
17460ff271
fix(security): 安全漏洞修复与依赖升级
...
- 升级 Vert.x 4.5.24 → 4.5.27, postgresql 42.7.3 → 42.7.11, logback 1.5.18 → 1.5.32, axios 1.13.5 → 1.16.1
- 修复 JWT 签名验证和密码比较的时序攻击漏洞 (MessageDigest.isEqual)
- 修复 AESUtils 使用不安全 Random 改为 SecureRandom
- 修复登录用户枚举和异常信息泄露,统一错误提示
- 修复 RateLimiter count++ 非原子操作 (AtomicInteger)
- 修复 JsParserExecutor DCL 模式缺少 volatile
- 修复 Token 日志泄露,仅打印前8字符
- 修复 Playground 密码时序攻击和堆栈泄露
- 所有 window.open 添加 noopener,noreferrer
- LocalConstant 改用 ConcurrentHashMap 保证线程安全
- Dockerfile 添加非 root 用户运行,secret.yml 加入 .gitignore
2026-05-29 14:20:54 +08:00
dependabot[bot]
4a79542a46
Bump axios from 1.12.0 to 1.13.5 in /web-front
...
Bumps [axios](https://github.com/axios/axios ) from 1.12.0 to 1.13.5.
- [Release notes](https://github.com/axios/axios/releases )
- [Changelog](https://github.com/axios/axios/blob/v1.x/CHANGELOG.md )
- [Commits](https://github.com/axios/axios/compare/v1.12.0...v1.13.5 )
---
updated-dependencies:
- dependency-name: axios
dependency-version: 1.13.5
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-02-11 17:55:01 +00:00
q
3a25e5f2ae
feat(v0.2.1): 添加认证参数支持和客户端下载命令生成
...
主要更新:
- 新增 auth 参数加密传递支持 (QK/UC Cookie认证)
- 实现下载命令自动生成 (curl/aria2c/迅雷)
- aria2c 命令支持 8 线程 8 片段下载
- 修复 cookie 字段映射问题
- 优化前端 clientLinks 页面
- 添加认证参数文档和测试用例
- 更新 .gitignore 忽略编译目录
2026-02-05 20:35:47 +08:00
q
343c017c79
fixed. 演练场静态打包问题
2026-01-04 09:29:20 +08:00
q
047a8eab89
更新代码和文档
2026-01-03 21:11:04 +08:00
q
e74d5ea97e
js演练场
2025-11-29 03:41:51 +08:00
dependabot[bot]
b616c59f1b
Bump axios from 1.11.0 to 1.12.0 in /web-front
...
Bumps [axios](https://github.com/axios/axios ) from 1.11.0 to 1.12.0.
- [Release notes](https://github.com/axios/axios/releases )
- [Changelog](https://github.com/axios/axios/blob/v1.x/CHANGELOG.md )
- [Commits](https://github.com/axios/axios/compare/v1.11.0...v1.12.0 )
---
updated-dependencies:
- dependency-name: axios
dependency-version: 1.12.0
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <support@github.com >
2025-09-12 09:37:49 +00:00
q
35c7746e38
直链API添加文件信息
...
修复蓝奏目录文件大小处理报错问题 #120
2025-08-19 18:56:42 +08:00
q
4ec5b491c5
目录解析支持优化 v0.1.9b5
2025-07-10 18:58:12 +08:00
qaiu
2f67e3b04d
lz目录解析预览
2025-07-09 07:06:12 +08:00
QAIU
1caabd1368
1. 修改docker构建失败
2025-06-04 15:37:50 +08:00
QAIU
2992d3586f
pod update
2024-11-05 18:42:32 +08:00
QAIU
4666e942b4
升级vue3
2024-11-04 18:56:49 +08:00
QAIU
1f504a8cd5
1. 前端页面优化, 增强统计功能, 支持生成二维码
...
2. 添加统计接口
2024-09-24 17:08:29 +08:00
QAIU
ba2bfbd11a
修复移动云空间无法解析的前端问题, 更新前端依赖
2024-09-23 16:45:30 +08:00
dependabot[bot]
6e77c21021
Bump axios from 1.6.0 to 1.7.4 in /web-front
...
Bumps [axios](https://github.com/axios/axios ) from 1.6.0 to 1.7.4.
- [Release notes](https://github.com/axios/axios/releases )
- [Changelog](https://github.com/axios/axios/blob/v1.x/CHANGELOG.md )
- [Commits](https://github.com/axios/axios/compare/v1.6.0...v1.7.4 )
---
updated-dependencies:
- dependency-name: axios
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <support@github.com >
2024-08-30 18:09:12 +00:00
dependabot[bot]
0cccba7b3b
Bump braces and filemanager-webpack-plugin in /web-front
...
Bumps [braces](https://github.com/micromatch/braces ) to 3.0.3 and updates ancestor dependency [filemanager-webpack-plugin](https://github.com/gregnb/filemanager-webpack-plugin ). These dependencies need to be updated together.
Updates `braces` from 3.0.2 to 3.0.3
- [Changelog](https://github.com/micromatch/braces/blob/master/CHANGELOG.md )
- [Commits](https://github.com/micromatch/braces/compare/3.0.2...3.0.3 )
Updates `filemanager-webpack-plugin` from 2.0.5 to 8.0.0
- [Release notes](https://github.com/gregnb/filemanager-webpack-plugin/releases )
- [Changelog](https://github.com/gregnb/filemanager-webpack-plugin/blob/master/CHANGELOG.md )
- [Commits](https://github.com/gregnb/filemanager-webpack-plugin/compare/v2.0.5...v8.0.0 )
---
updated-dependencies:
- dependency-name: braces
dependency-type: indirect
- dependency-name: filemanager-webpack-plugin
dependency-type: direct:development
...
Signed-off-by: dependabot[bot] <support@github.com >
2024-06-11 06:54:54 +00:00
dependabot[bot]
db073beeb5
Bump axios from 1.2.2 to 1.6.0 in /web-front
...
Bumps [axios](https://github.com/axios/axios ) from 1.2.2 to 1.6.0.
- [Release notes](https://github.com/axios/axios/releases )
- [Changelog](https://github.com/axios/axios/blob/v1.x/CHANGELOG.md )
- [Commits](https://github.com/axios/axios/compare/1.2.2...v1.6.0 )
---
updated-dependencies:
- dependency-name: axios
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <support@github.com >
2023-11-10 02:02:37 +00:00
QAIU
daea6bea68
lz.qaiu.top加入前端页面
2023-07-31 11:38:23 +08:00
qaiu
214eaed56a
添加前端页面
2023-07-31 03:21:39 +08:00