fix: harden gzip decode and release 0.4.5

Avoid ZipException when Vert.x already decompressed gzip bodies, keep jackson-databind on the IDE classpath, and show a real build version instead of unknown.

Co-authored-by: Cursor <cursoragent@cursor.com>

.github/workflows/maven.yml

@@ -8,7 +8,7 @@ on:
   workflow_dispatch:
   push:
     tags:
-      - '*'
+      - 'v*'
     branches-ignore:
       - '*'
     paths-ignore:
@@ -262,9 +262,27 @@ jobs:
         name: ${{ matrix.artifact-name }}
         path: ${{ matrix.artifact-name }}.zip
 
-    - name: 上传到 Release
+  # ================================================================
+  # 阶段三：创建 GitHub Release（只跑一次，避免矩阵任务重复拼接更新日志）
+  # ================================================================
+  publish-release:
+    name: 发布 GitHub Release
+    needs: native-package
+    if: github.event_name != 'pull_request' && github.ref_type == 'tag'
+    runs-on: ubuntu-latest
+    steps:
+    - name: 下载原生安装包
+      uses: actions/download-artifact@v4
+      with:
+        pattern: netdisk-fast-download-*
+        merge-multiple: true
+
+    - name: 创建 Release
       uses: softprops/action-gh-release@v2
       with:
-        files: ${{ matrix.artifact-name }}.zip
+        files: |
+          netdisk-fast-download-linux-amd64.zip
+          netdisk-fast-download-windows-amd64.zip
         tag_name: ${{ github.ref_name }}
         generate_release_notes: true
+        fail_on_unmatched_files: true

README.md

@@ -457,7 +457,7 @@ docker run --rm -v /var/run/docker.sock:/var/run/docker.sock containrrr/watchtow
 > 注意: netdisk-fast-download.service中的ExecStart的路径改为实际路径
 ```shell
 cd ~
-wget -O netdisk-fast-download.zip https://github.com/qaiu/netdisk-fast-download/releases/download/v0.4.2/netdisk-fast-download-linux-amd64.zip
+wget -O netdisk-fast-download.zip https://github.com/qaiu/netdisk-fast-download/releases/download/v0.4.5/netdisk-fast-download-linux-amd64.zip
 unzip netdisk-fast-download.zip
 cd netdisk-fast-download
 bash service-install.sh

core/src/main/java/cn/qaiu/vx/core/util/CommonUtil.java

@@ -162,13 +162,18 @@ public class CommonUtil {
             try (var is = CommonUtil.class.getClassLoader().getResourceAsStream("app.properties")) {
                 if (is != null) {
                     properties.load(is);
-                    if (!properties.isEmpty()) {
+                    String version = properties.getProperty("app.version");
-                        appVersion = properties.getProperty("app.version") + "build" + properties.getProperty("build");
+                    String build = properties.getProperty("build");
+                    if (version != null && !version.contains("${")) {
+                        appVersion = version + "build" + (build == null || build.contains("${") ? "" : build);
                     }
                 }
-            } catch (IOException e) {
+            } catch (Exception e) {
                 LOGGER.error("读取app.properties失败", e);
             }
+            if (appVersion == null) {
+                appVersion = "unknown";
+            }
         }
         return appVersion;
     }

parser/pom.xml

@@ -63,7 +63,7 @@
         <lombok.version>1.18.38</lombok.version>
         <slf4j.version>2.0.16</slf4j.version>
         <commons-lang3.version>3.18.0</commons-lang3.version>
-        <jackson.version>2.18.6</jackson.version>
+        <jackson.version>2.18.9</jackson.version>
         <logback.version>1.5.32</logback.version>
         <junit.version>4.13.2</junit.version>
     </properties>

parser/src/main/java/cn/qaiu/parser/PanBase.java

@@ -368,9 +368,12 @@ public abstract class PanBase implements IPanTool, Closeable {
         // 检查响应头中的Content-Encoding是否为gzip
         String contentEncoding = res.getHeader("Content-Encoding");
         try {
-            if ("gzip".equalsIgnoreCase(contentEncoding)) {
+            if ("gzip".equalsIgnoreCase(contentEncoding) && res.body() instanceof Buffer gzipBody
+                    && gzipBody.length() >= 2
+                    && (gzipBody.getByte(0) & 0xff) == 0x1f
+                    && (gzipBody.getByte(1) & 0xff) == 0x8b) {
                 // 如果是gzip压缩的响应体，解压（只解压一次，缓存结果）
-                String decompressed = decompressGzip((Buffer) res.body());
+                String decompressed = decompressGzip(gzipBody);
                 return new JsonObject(decompressed);
             } else {
                 return res.bodyAsJsonObject();

parser/src/main/java/cn/qaiu/util/HttpResponseHelper.java

@@ -119,8 +119,18 @@ public class HttpResponseHelper {
         };
     }
 
+    private static boolean looksLikeGzip(Buffer compressed) {
+        return compressed != null && compressed.length() >= 2
+                && (compressed.getByte(0) & 0xff) == 0x1f
+                && (compressed.getByte(1) & 0xff) == 0x8b;
+    }
+
     // -------------------- gzip --------------------
     private static String decompressGzip(Buffer compressed) throws IOException {
+        // Vert.x 可能已解压但仍带 Content-Encoding: gzip，再走 GZIPInputStream 会变成 ZipException
+        if (!looksLikeGzip(compressed)) {
+            return compressed.toString(StandardCharsets.UTF_8);
+        }
         try (ByteArrayInputStream bais = new ByteArrayInputStream(compressed.getBytes());
              GZIPInputStream gzis = new GZIPInputStream(bais);
              InputStreamReader isr = new InputStreamReader(gzis, StandardCharsets.UTF_8);

parser/src/main/java/cn/qaiu/util/JsContent.java

@@ -101,59 +101,384 @@ public interface JsContent {
             """;
     String lz = """
             /**
-             * 蓝奏云解析器js签名获取工具
+             * 蓝奏云解析器 JS 沙箱：伪装 jQuery / document / window。
+             * 新版页面会用 document.cookie、location.reload、querySelector、
+             * $('#pwd').val()、.html()、.css() 等，这里做成可链式的最小实现。
+             * kdns.js 在浏览器里是 `var killdns = true`，需一并注入，否则 kd 会被改成 0。
              */
                         
             var signObj;
+            var __lzPwd = '';
+            var killdns = true;
                         
+            function __lzSetPwd(p) {
+              __lzPwd = p == null ? '' : String(p);
+            }
+                        
+            function __lzEl(id) {
+              var nid = String(id == null ? '' : id).replace(/^[#.]/, '');
+              var el = {
+                id: nid,
+                _value: nid === 'pwd' ? __lzPwd : '',
+                checked: false,
+                disabled: false,
+                innerHTML: '',
+                innerText: '',
+                textContent: '',
+                className: '',
+                style: { display: '', visibility: '', width: '', height: '' },
+                classList: {
+                  add: function () {},
+                  remove: function () {},
+                  contains: function () { return false; },
+                  toggle: function () {}
+                },
+                setAttribute: function () {},
+                getAttribute: function () { return null; },
+                removeAttribute: function () {},
+                addEventListener: function (t, fn) {
+                  if (typeof fn === 'function') {
+                    try { fn(); } catch (e) {}
+                  }
+                },
+                removeEventListener: function () {},
+                appendChild: function (n) { return n; },
+                removeChild: function (n) { return n; },
+                insertBefore: function (n) { return n; },
+                click: function () {},
+                focus: function () {},
+                blur: function () {},
+                submit: function () {},
+                select: function () {},
+                reset: function () {}
+              };
+              el.parentNode = el;
+              el.parentElement = el;
+              el.children = [];
+              el.childNodes = [];
+              el.firstChild = null;
+              el.lastChild = null;
+              try {
+                Object.defineProperty(el, 'value', {
+                  get: function () { return nid === 'pwd' ? __lzPwd : el._value; },
+                  set: function (v) {
+                    el._value = v;
+                    if (nid === 'pwd') {
+                      __lzPwd = v == null ? '' : String(v);
+                    }
+                  }
+                });
+              } catch (e) {
+                el.value = el._value;
+              }
+              return el;
+            }
+                        
+            function __lzJq(sel) {
+              var id = '';
+              if (typeof sel === 'string') {
+                id = sel.replace(/^[#.]/, '');
+              } else if (sel && sel.id) {
+                id = String(sel.id);
+              }
+              var el = (sel && sel.style && sel.addEventListener) ? sel : __lzEl(id);
+              var api = {
+                0: el,
+                length: 1,
+                selector: sel,
+                ready: function (fn) {
+                  if (typeof fn === 'function') {
+                    try { fn(jQuery); } catch (e) {}
+                  }
+                  return api;
+                },
+                on: function (t, fn) {
+                  if (typeof fn === 'function') {
+                    try { fn(); } catch (e) {}
+                  }
+                  return api;
+                },
+                off: function () { return api; },
+                bind: function (t, fn) { return api.on(t, fn); },
+                unbind: function () { return api; },
+                click: function (fn) {
+                  if (typeof fn === 'function') {
+                    try { fn(); } catch (e) {}
+                  }
+                  return api;
+                },
+                focus: function (fn) {
+                  if (typeof fn === 'function') {
+                    try { fn(); } catch (e) {}
+                  }
+                  return api;
+                },
+                blur: function () { return api; },
+                keyup: function (fn) {
+                  if (typeof fn === 'function') {
+                    try { fn(); } catch (e) {}
+                  }
+                  return api;
+                },
+                keydown: function (fn) { return api.keyup(fn); },
+                keypress: function (fn) { return api.keyup(fn); },
+                submit: function (fn) { return api.click(fn); },
+                change: function (fn) { return api.click(fn); },
+                hover: function () { return api; },
+                val: function (v) {
+                  if (arguments.length === 0) {
+                    if (typeof el.value !== 'undefined') {
+                      return el.value;
+                    }
+                    return (id === 'pwd') ? __lzPwd : '';
+                  }
+                  el.value = v;
+                  return api;
+                },
+                html: function (v) {
+                  if (arguments.length === 0) {
+                    return el.innerHTML;
+                  }
+                  el.innerHTML = v;
+                  return api;
+                },
+                text: function (v) {
+                  if (arguments.length === 0) {
+                    return el.innerText;
+                  }
+                  el.innerText = v;
+                  el.textContent = v;
+                  return api;
+                },
+                attr: function (k, v) {
+                  if (arguments.length < 2) {
+                    return null;
+                  }
+                  return api;
+                },
+                prop: function (k, v) {
+                  if (arguments.length < 2) {
+                    return false;
+                  }
+                  return api;
+                },
+                css: function () { return api; },
+                addClass: function () { return api; },
+                removeClass: function () { return api; },
+                toggleClass: function () { return api; },
+                hasClass: function () { return false; },
+                show: function () {
+                  el.style.display = '';
+                  return api;
+                },
+                hide: function () {
+                  el.style.display = 'none';
+                  return api;
+                },
+                fadeIn: function () { return api; },
+                fadeOut: function () { return api; },
+                animate: function () { return api; },
+                find: function () { return api; },
+                parent: function () { return api; },
+                children: function () { return api; },
+                eq: function () { return api; },
+                first: function () { return api; },
+                last: function () { return api; },
+                each: function (fn) {
+                  if (typeof fn === 'function') {
+                    try { fn.call(el, 0, el); } catch (e) {}
+                  }
+                  return api;
+                },
+                append: function () { return api; },
+                prepend: function () { return api; },
+                remove: function () { return api; },
+                empty: function () { return api; },
+                ajax: function (obj) {
+                  signObj = obj;
+                  return api;
+                },
+                get: function () { return el; }
+              };
+              return api;
+            }
                         
             var $, jQuery;
-                        
+            $ = jQuery = function (sel) {
-            $ = jQuery = function () {
+              if (typeof sel === 'function') {
-              return new jQuery.fn.init();
+                try { sel(jQuery); } catch (e) {}
-            }
+                return __lzJq(document);
+              }
+              return __lzJq(sel);
+            };
                         
             jQuery.fn = jQuery.prototype = {
-              init: function () {
+              init: function (sel) {
-                return {
+                return __lzJq(sel);
-                  focus: function (a) {
+              }
-                        
+            };
-                  },
-                  keyup: function(a) {
-                        
-                  },
-                  ajax: function (obj) {
-                    signObj = obj
-                  },
-                  val: function(a) {
-                        
-                  },
-                        
-                }
-              },
-                        
-            }
-                        
             jQuery.fn.init.prototype = jQuery.fn;
-                        
+            $.fn = jQuery.fn;
                         
             $.ajax = function (obj) {
-              signObj = obj
+              signObj = obj;
-            }
+              return {
+                done: function () { return this; },
+                fail: function () { return this; },
+                always: function () { return this; }
+              };
+            };
+            $.get = function () {};
+            $.post = function () {};
+            $.extend = function () {
+              var t = arguments[0] || {};
+              for (var i = 1; i < arguments.length; i++) {
+                var s = arguments[i];
+                if (s) {
+                  for (var k in s) {
+                    if (s.hasOwnProperty(k)) {
+                      t[k] = s[k];
+                    }
+                  }
+                }
+              }
+              return t;
+            };
+            $.each = function (obj, fn) {
+              if (!obj || typeof fn !== 'function') {
+                return obj;
+              }
+              if (typeof obj.length === 'number') {
+                for (var i = 0; i < obj.length; i++) {
+                  fn.call(obj[i], i, obj[i]);
+                }
+              } else {
+                for (var k in obj) {
+                  if (obj.hasOwnProperty(k)) {
+                    fn.call(obj[k], k, obj[k]);
+                  }
+                }
+              }
+              return obj;
+            };
+            $.isFunction = function (f) { return typeof f === 'function'; };
+            $.isArray = function (a) {
+              return Object.prototype.toString.call(a) === '[object Array]';
+            };
+            $.trim = function (s) {
+              return s == null ? '' : String(s).replace(/^\\s+|\\s+$/g, '');
+            };
+                        
+            var __lzLocation = {
+              href: '',
+              search: '',
+              pathname: '/',
+              hash: '',
+              host: '',
+              hostname: '',
+              protocol: 'https:',
+              port: '',
+              origin: '',
+              assign: function () {},
+              replace: function () {},
+              reload: function () {}
+            };
                         
             var document = {
-              getElementById: function (v) {
+              cookie: '',
-                return {
+              title: '',
-                  value: 'v',
+              domain: '',
-                  style: {
+              referrer: '',
-                    display: ''
+              readyState: 'complete',
-                  },
+              hidden: false,
-                  addEventListener: function() {}
+              visibilityState: 'visible',
+              documentElement: null,
+              body: null,
+              head: null,
+              location: __lzLocation,
+              getElementById: function (id) { return __lzEl(id); },
+              getElementsByClassName: function () { return []; },
+              getElementsByTagName: function (t) {
+                return t === 'script' ? [] : [__lzEl(t)];
+              },
+              getElementsByName: function () { return []; },
+              querySelector: function (s) { return __lzEl(s); },
+              querySelectorAll: function (s) { return [__lzEl(s)]; },
+              createElement: function (t) { return __lzEl(t); },
+              createTextNode: function (t) { return { nodeValue: t, data: t }; },
+              createDocumentFragment: function () { return __lzEl('fragment'); },
+              addEventListener: function (t, fn) {
+                if (typeof fn === 'function') {
+                  try { fn(); } catch (e) {}
                 }
               },
+              removeEventListener: function () {},
+              write: function () {},
+              writeln: function () {},
+              open: function () {},
+              close: function () {}
+            };
+            document.documentElement = __lzEl('html');
+            document.body = __lzEl('body');
+            document.head = __lzEl('head');
+                        
+            var navigator = {
+              userAgent: 'Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36',
+              platform: 'Win32',
+              language: 'zh-CN',
+              cookieEnabled: true,
+              onLine: true
+            };
+                        
+            var location = __lzLocation;
+            var console = {
+              log: function () {},
+              warn: function () {},
+              error: function () {},
+              info: function () {},
+              debug: function () {}
+            };
+                        
+            function setTimeout(fn, delay) {
+              if (typeof fn === 'function' && (!delay || delay <= 0)) {
+                try { fn(); } catch (e) {}
+              }
+              return 0;
             }
-            
+            function setInterval() { return 0; }
-            var window = {location: {}}
+            function clearTimeout() {}
+            function clearInterval() {}
+                        
+            var window = {
+              location: __lzLocation,
+              document: document,
+              navigator: navigator,
+              console: console,
+              innerWidth: 1920,
+              innerHeight: 1080,
+              setTimeout: setTimeout,
+              setInterval: setInterval,
+              clearTimeout: clearTimeout,
+              clearInterval: clearInterval,
+              addEventListener: function (t, fn) {
+                if (typeof fn === 'function') {
+                  try { fn(); } catch (e) {}
+                }
+              },
+              removeEventListener: function () {},
+              atob: function (s) { return s; },
+              btoa: function (s) { return s; }
+            };
+            window.window = window;
+            window.top = window;
+            window.self = window;
+            window.parent = window;
+            window.jQuery = jQuery;
+            window.$ = $;
+                        
+            var top = window;
+            var self = window;
+            var parent = window;
             """;
 
     String kwSignString = """

parser/src/main/java/cn/qaiu/util/JsExecUtils.java

@@ -50,21 +50,47 @@ public class JsExecUtils {
      */
     public static ScriptObjectMirror executeDynamicJs(String jsText, String funName) throws ScriptException,
             NoSuchMethodException {
-        ScriptEngine engine = ENGINE_MANAGER.getEngineByName("JavaScript"); // 得到脚本引擎
+        return executeDynamicJs(jsText, funName, null);
+    }
+
+    /**
+     * @param pwd 分享密码，写入伪 DOM（#pwd / getElementById('pwd')），供新版页面取值
+     */
+    public static ScriptObjectMirror executeDynamicJs(String jsText, String funName, String pwd) throws ScriptException,
+            NoSuchMethodException {
+        ScriptEngine engine = ENGINE_MANAGER.getEngineByName("JavaScript");
         try {
-            engine.eval(JsContent.lz + "\n" + jsText);
+            engine.eval(JsContent.lz);
             Invocable inv = (Invocable) engine;
-            //调用js中的函数
+            if (pwd != null) {
-            if (StringUtils.isNotEmpty(funName)) {
+                inv.invokeFunction("__lzSetPwd", pwd);
-                inv.invokeFunction(funName);
             }
-            return (ScriptObjectMirror) engine.get("signObj");
+            try {
+                engine.eval(jsText);
+                if (StringUtils.isNotEmpty(funName)) {
+                    inv.invokeFunction(funName);
+                }
+            } catch (ScriptException | NoSuchMethodException | RuntimeException e) {
+                ScriptObjectMirror captured = asSignObj(engine.get("signObj"));
+                if (captured != null) {
+                    return captured;
+                }
+                throw e;
+            }
+            return asSignObj(engine.get("signObj"));
         } finally {
-            // 清理引擎持有的引用，帮助 GC 回收
             clearEngineBindings(engine);
         }
     }
 
+    private static ScriptObjectMirror asSignObj(Object sign) {
+        if (sign instanceof ScriptObjectMirror mirror
+                && (mirror.get("url") != null || mirror.get("data") != null)) {
+            return mirror;
+        }
+        return null;
+    }
+
 
     /**
      * 调用执行js文件（使用缓存的 ScriptEngineManager 创建新引擎实例）

parser/src/main/resources/js/lz.js

@@ -1,46 +1,379 @@
 /**
- * 蓝奏云解析器js签名获取工具
+ * 蓝奏云解析器 JS 沙箱：伪装 jQuery / document / window。
+ * 新版页面会用 document.cookie、location.reload、querySelector、
+ * $('#pwd').val()、.html()、.css() 等，这里做成可链式的最小实现。
+ * kdns.js 在浏览器里是 `var killdns = true`，需一并注入，否则 kd 会被改成 0。
  */
 
 var signObj;
+var __lzPwd = '';
+var killdns = true;
 
+function __lzSetPwd(p) {
+  __lzPwd = p == null ? '' : String(p);
+}
+
+function __lzEl(id) {
+  var nid = String(id == null ? '' : id).replace(/^[#.]/, '');
+  var el = {
+    id: nid,
+    _value: nid === 'pwd' ? __lzPwd : '',
+    checked: false,
+    disabled: false,
+    innerHTML: '',
+    innerText: '',
+    textContent: '',
+    className: '',
+    style: { display: '', visibility: '', width: '', height: '' },
+    classList: {
+      add: function () {},
+      remove: function () {},
+      contains: function () { return false; },
+      toggle: function () {}
+    },
+    setAttribute: function () {},
+    getAttribute: function () { return null; },
+    removeAttribute: function () {},
+    addEventListener: function (t, fn) {
+      if (typeof fn === 'function') {
+        try { fn(); } catch (e) {}
+      }
+    },
+    removeEventListener: function () {},
+    appendChild: function (n) { return n; },
+    removeChild: function (n) { return n; },
+    insertBefore: function (n) { return n; },
+    click: function () {},
+    focus: function () {},
+    blur: function () {},
+    submit: function () {},
+    select: function () {},
+    reset: function () {}
+  };
+  el.parentNode = el;
+  el.parentElement = el;
+  el.children = [];
+  el.childNodes = [];
+  el.firstChild = null;
+  el.lastChild = null;
+  try {
+    Object.defineProperty(el, 'value', {
+      get: function () { return nid === 'pwd' ? __lzPwd : el._value; },
+      set: function (v) {
+        el._value = v;
+        if (nid === 'pwd') {
+          __lzPwd = v == null ? '' : String(v);
+        }
+      }
+    });
+  } catch (e) {
+    el.value = el._value;
+  }
+  return el;
+}
+
+function __lzJq(sel) {
+  var id = '';
+  if (typeof sel === 'string') {
+    id = sel.replace(/^[#.]/, '');
+  } else if (sel && sel.id) {
+    id = String(sel.id);
+  }
+  var el = (sel && sel.style && sel.addEventListener) ? sel : __lzEl(id);
+  var api = {
+    0: el,
+    length: 1,
+    selector: sel,
+    ready: function (fn) {
+      if (typeof fn === 'function') {
+        try { fn(jQuery); } catch (e) {}
+      }
+      return api;
+    },
+    on: function (t, fn) {
+      if (typeof fn === 'function') {
+        try { fn(); } catch (e) {}
+      }
+      return api;
+    },
+    off: function () { return api; },
+    bind: function (t, fn) { return api.on(t, fn); },
+    unbind: function () { return api; },
+    click: function (fn) {
+      if (typeof fn === 'function') {
+        try { fn(); } catch (e) {}
+      }
+      return api;
+    },
+    focus: function (fn) {
+      if (typeof fn === 'function') {
+        try { fn(); } catch (e) {}
+      }
+      return api;
+    },
+    blur: function () { return api; },
+    keyup: function (fn) {
+      if (typeof fn === 'function') {
+        try { fn(); } catch (e) {}
+      }
+      return api;
+    },
+    keydown: function (fn) { return api.keyup(fn); },
+    keypress: function (fn) { return api.keyup(fn); },
+    submit: function (fn) { return api.click(fn); },
+    change: function (fn) { return api.click(fn); },
+    hover: function () { return api; },
+    val: function (v) {
+      if (arguments.length === 0) {
+        if (typeof el.value !== 'undefined') {
+          return el.value;
+        }
+        return (id === 'pwd') ? __lzPwd : '';
+      }
+      el.value = v;
+      return api;
+    },
+    html: function (v) {
+      if (arguments.length === 0) {
+        return el.innerHTML;
+      }
+      el.innerHTML = v;
+      return api;
+    },
+    text: function (v) {
+      if (arguments.length === 0) {
+        return el.innerText;
+      }
+      el.innerText = v;
+      el.textContent = v;
+      return api;
+    },
+    attr: function (k, v) {
+      if (arguments.length < 2) {
+        return null;
+      }
+      return api;
+    },
+    prop: function (k, v) {
+      if (arguments.length < 2) {
+        return false;
+      }
+      return api;
+    },
+    css: function () { return api; },
+    addClass: function () { return api; },
+    removeClass: function () { return api; },
+    toggleClass: function () { return api; },
+    hasClass: function () { return false; },
+    show: function () {
+      el.style.display = '';
+      return api;
+    },
+    hide: function () {
+      el.style.display = 'none';
+      return api;
+    },
+    fadeIn: function () { return api; },
+    fadeOut: function () { return api; },
+    animate: function () { return api; },
+    find: function () { return api; },
+    parent: function () { return api; },
+    children: function () { return api; },
+    eq: function () { return api; },
+    first: function () { return api; },
+    last: function () { return api; },
+    each: function (fn) {
+      if (typeof fn === 'function') {
+        try { fn.call(el, 0, el); } catch (e) {}
+      }
+      return api;
+    },
+    append: function () { return api; },
+    prepend: function () { return api; },
+    remove: function () { return api; },
+    empty: function () { return api; },
+    ajax: function (obj) {
+      signObj = obj;
+      return api;
+    },
+    get: function () { return el; }
+  };
+  return api;
+}
 
 var $, jQuery;
-
+$ = jQuery = function (sel) {
-$ = jQuery = function () {
+  if (typeof sel === 'function') {
-  return new jQuery.fn.init();
+    try { sel(jQuery); } catch (e) {}
-}
+    return __lzJq(document);
+  }
+  return __lzJq(sel);
+};
 
 jQuery.fn = jQuery.prototype = {
-  init: function () {
+  init: function (sel) {
-    return {
+    return __lzJq(sel);
-      focus: function (a) {
+  }
-
+};
-      },
-      keyup: function(a) {
-
-      },
-      ajax: function (obj) {
-        signObj = obj
-      }
-
-    }
-  },
-
-}
-
 jQuery.fn.init.prototype = jQuery.fn;
+$.fn = jQuery.fn;
 
-
-// 伪装jquery.ajax函数获取关键数据
 $.ajax = function (obj) {
-  signObj = obj
+  signObj = obj;
-}
+  return {
+    done: function () { return this; },
+    fail: function () { return this; },
+    always: function () { return this; }
+  };
+};
+$.get = function () {};
+$.post = function () {};
+$.extend = function () {
+  var t = arguments[0] || {};
+  for (var i = 1; i < arguments.length; i++) {
+    var s = arguments[i];
+    if (s) {
+      for (var k in s) {
+        if (s.hasOwnProperty(k)) {
+          t[k] = s[k];
+        }
+      }
+    }
+  }
+  return t;
+};
+$.each = function (obj, fn) {
+  if (!obj || typeof fn !== 'function') {
+    return obj;
+  }
+  if (typeof obj.length === 'number') {
+    for (var i = 0; i < obj.length; i++) {
+      fn.call(obj[i], i, obj[i]);
+    }
+  } else {
+    for (var k in obj) {
+      if (obj.hasOwnProperty(k)) {
+        fn.call(obj[k], k, obj[k]);
+      }
+    }
+  }
+  return obj;
+};
+$.isFunction = function (f) { return typeof f === 'function'; };
+$.isArray = function (a) {
+  return Object.prototype.toString.call(a) === '[object Array]';
+};
+$.trim = function (s) {
+  return s == null ? '' : String(s).replace(/^\s+|\s+$/g, '');
+};
+
+var __lzLocation = {
+  href: '',
+  search: '',
+  pathname: '/',
+  hash: '',
+  host: '',
+  hostname: '',
+  protocol: 'https:',
+  port: '',
+  origin: '',
+  assign: function () {},
+  replace: function () {},
+  reload: function () {}
+};
 
 var document = {
-  getElementById: function (v) {
+  cookie: '',
-    return {
+  title: '',
-      value: 'v'
+  domain: '',
+  referrer: '',
+  readyState: 'complete',
+  hidden: false,
+  visibilityState: 'visible',
+  documentElement: null,
+  body: null,
+  head: null,
+  location: __lzLocation,
+  getElementById: function (id) { return __lzEl(id); },
+  getElementsByClassName: function () { return []; },
+  getElementsByTagName: function (t) {
+    return t === 'script' ? [] : [__lzEl(t)];
+  },
+  getElementsByName: function () { return []; },
+  querySelector: function (s) { return __lzEl(s); },
+  querySelectorAll: function (s) { return [__lzEl(s)]; },
+  createElement: function (t) { return __lzEl(t); },
+  createTextNode: function (t) { return { nodeValue: t, data: t }; },
+  createDocumentFragment: function () { return __lzEl('fragment'); },
+  addEventListener: function (t, fn) {
+    if (typeof fn === 'function') {
+      try { fn(); } catch (e) {}
     }
   },
+  removeEventListener: function () {},
+  write: function () {},
+  writeln: function () {},
+  open: function () {},
+  close: function () {}
+};
+document.documentElement = __lzEl('html');
+document.body = __lzEl('body');
+document.head = __lzEl('head');
+
+var navigator = {
+  userAgent: 'Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36',
+  platform: 'Win32',
+  language: 'zh-CN',
+  cookieEnabled: true,
+  onLine: true
+};
+
+var location = __lzLocation;
+var console = {
+  log: function () {},
+  warn: function () {},
+  error: function () {},
+  info: function () {},
+  debug: function () {}
+};
+
+function setTimeout(fn, delay) {
+  if (typeof fn === 'function' && (!delay || delay <= 0)) {
+    try { fn(); } catch (e) {}
+  }
+  return 0;
 }
+function setInterval() { return 0; }
+function clearTimeout() {}
+function clearInterval() {}
+
+var window = {
+  location: __lzLocation,
+  document: document,
+  navigator: navigator,
+  console: console,
+  innerWidth: 1920,
+  innerHeight: 1080,
+  setTimeout: setTimeout,
+  setInterval: setInterval,
+  clearTimeout: clearTimeout,
+  clearInterval: clearInterval,
+  addEventListener: function (t, fn) {
+    if (typeof fn === 'function') {
+      try { fn(); } catch (e) {}
+    }
+  },
+  removeEventListener: function () {},
+  atob: function (s) { return s; },
+  btoa: function (s) { return s; }
+};
+window.window = window;
+window.top = window;
+window.self = window;
+window.parent = window;
+window.jQuery = jQuery;
+window.$ = $;
+
+var top = window;
+var self = window;
+var parent = window;

parser/src/test/java/cn/qaiu/util/JsExecUtilsLzTest.java

@@ -0,0 +1,90 @@
+package cn.qaiu.util;
+
+import org.junit.Test;
+import org.openjdk.nashorn.api.scripting.ScriptObjectMirror;
+
+import java.util.Map;
+
+import static org.junit.Assert.*;
+
+/**
+ * 新版蓝奏页面会调用更多 document / jQuery API，沙箱必须能跑完并抓住 $.ajax。
+ */
+public class JsExecUtilsLzTest {
+
+    @Test
+    public void testNewIframeAjaxWithDomApis() throws Exception {
+        String js = """
+                var lanosso = '';
+                var down_1 = '';
+                var wsk_sign = 'c20230908';
+                var wp_sign = 'SIGN_ABC';
+                var ajaxdata = 'MrBR';
+                var kdns = 1;
+                if (typeof(killdns)=='undefined'){
+                    var kdns = 0;
+                }
+                document.cookie = 'x=1';
+                document.location.reload();
+                document.querySelector('#tourl');
+                document.createElement('div');
+                $.ajax({
+                    type : 'post',
+                    url : '/ajaxfile.php?file=150233466',
+                    data : { 'action':'downprocess','websignkey':ajaxdata,'signs':ajaxdata,'sign':wp_sign,'websign':'','kd':kdns,'ves':1 },
+                    dataType : 'json',
+                    success:function(msg){
+                        $("#tourl").html("ok");
+                        $("#outime").css("display","block");
+                    }
+                });
+                """;
+        ScriptObjectMirror sign = JsExecUtils.executeDynamicJs(js, null);
+        assertNotNull(sign);
+        assertEquals("/ajaxfile.php?file=150233466", String.valueOf(sign.get("url")));
+        @SuppressWarnings("unchecked")
+        Map<String, Object> data = (Map<String, Object>) sign.get("data");
+        assertEquals("downprocess", String.valueOf(data.get("action")));
+        assertEquals("SIGN_ABC", String.valueOf(data.get("sign")));
+        assertEquals("MrBR", String.valueOf(data.get("websignkey")));
+        assertEquals("1", String.valueOf(data.get("kd")));
+    }
+
+    @Test
+    public void testPwdViaJqueryValAndDocument() throws Exception {
+        String js = """
+                function down_p(){
+                    var pwd = $('#pwd').val();
+                    var pwd2 = document.getElementById('pwd').value;
+                    var pwd3 = document.querySelector('#pwd').value;
+                    $(".passwdinput").focus();
+                    $.ajax({
+                        type : 'post',
+                        url : '/ajaxm.php',
+                        data : { 'action':'downprocess','sign':'S1','p':pwd,'p2':pwd2,'p3':pwd3 }
+                    });
+                }
+                """;
+        ScriptObjectMirror sign = JsExecUtils.executeDynamicJs(js, "down_p", "e4k4");
+        assertNotNull(sign);
+        @SuppressWarnings("unchecked")
+        Map<String, Object> data = (Map<String, Object>) sign.get("data");
+        assertEquals("e4k4", String.valueOf(data.get("p")));
+        assertEquals("e4k4", String.valueOf(data.get("p2")));
+        assertEquals("e4k4", String.valueOf(data.get("p3")));
+    }
+
+    @Test
+    public void testReadyAndSuccessCallbackDoNotDropAjax() throws Exception {
+        String js = """
+                $(function(){
+                    document.getElementById('rpt').style.display = 'none';
+                    $.ajax({ url: '/ajaxm.php?file=1', data: { a: 1 } });
+                    $("#tourl").html("x");
+                });
+                """;
+        ScriptObjectMirror sign = JsExecUtils.executeDynamicJs(js, null);
+        assertNotNull(sign);
+        assertTrue(String.valueOf(sign.get("url")).contains("ajaxm.php"));
+    }
+}

pom.xml

@@ -17,7 +17,7 @@
     </modules>
 
     <properties>
-        <revision>0.4.2</revision>
+        <revision>0.4.5</revision>
         <java.version>17</java.version>
         <maven.compiler.source>17</maven.compiler.source>
         <maven.compiler.target>17</maven.compiler.target>

web-front/package.json

@@ -1,6 +1,6 @@
 {
   "name": "nfd-web",
-  "version": "0.4.2",
+  "version": "0.4.5",
   "private": true,
   "scripts": {
     "serve": "vue-cli-service serve",

web-service/pom.xml

@@ -30,6 +30,16 @@
             <groupId>cn.qaiu</groupId>
             <artifactId>parser</artifactId>
         </dependency>
+        <dependency>
+            <groupId>com.fasterxml.jackson.core</groupId>
+            <artifactId>jackson-databind</artifactId>
+            <version>${jackson.version}</version>
+        </dependency>
+        <dependency>
+            <groupId>com.fasterxml.jackson.datatype</groupId>
+            <artifactId>jackson-datatype-jsr310</artifactId>
+            <version>${jackson.version}</version>
+        </dependency>
         <dependency>
             <groupId>org.projectlombok</groupId>
             <artifactId>lombok</artifactId>

web-service/src/main/java/cn/qaiu/lz/web/controller/ParserApi.java

@@ -463,11 +463,14 @@ public class ParserApi {
     // 获取版本号
     @RouteMapping("/build-version")
     public String getVersion() {
-        return CommonUtil.getAppVersion()
+        String version = CommonUtil.getAppVersion();
+        if (version == null || version.isBlank()) {
+            return "unknown";
+        }
+        return version
         .replace("-", "")
         .replace("Z", "")
         .replace("T", "_")
-        .replace("-", "")
         .replace(":", "");
     }