fix: 修复漏洞

SilianZ · SilianZ · commit b96e084c3e9b · 2024-12-29T15:11:18.000+08:00
diff --git a/assets/dashboard/assets/index-BQ9kYwai.js b/assets/dashboard/assets/index-BQ9kYwai.js
diff --git a/assets/dashboard/index.html b/assets/dashboard/index.html
@@ -4,7 +4,7 @@
     <meta charset="UTF-8" />
     <meta name="viewport" content="width=device-width, initial-scale=1.0" />
     <title>Python OpenBMCLAPI Dashboard</title>
-    <script type="module" crossorigin src="/assets/index-DsyND4Ca.js"></script>
+    <script type="module" crossorigin src="/assets/index-BQ9kYwai.js"></script>
     <link rel="stylesheet" crossorigin href="/assets/index-BhTleVqd.css">
   </head>
   <body>
diff --git a/core/storages/alist.py b/core/storages/alist.py
@@ -90,7 +90,7 @@ async def getMissingFiles(self, files: FileList, pbar: tqdm) -> FileList:
         existing_files: List[FileInfo] = []
         async with aiohttp.ClientSession(self.url, headers=self.headers) as session:
 
-            async def getFileList(dir: str) -> List[FileInfo]:
+            async def getFileList(dir: str, pbar: tqdm) -> List[FileInfo]:
                 file_path = self.path + dir
                 response = await session.post(
                     "/api/fs/list", headers=self.headers, json={"path": file_path}
@@ -113,7 +113,7 @@ async def getFileList(dir: str) -> List[FileInfo]:
             ) as _pbar:
                 for i in range(256):
                     dir = f"/{i:02x}"
-                    existing_files += await getFileList(dir)
+                    existing_files += await getFileList(dir, _pbar)
 
         existing_info: Set[Tuple[str, int]] = {
             (file.hash, file.size) for file in existing_files
diff --git a/dashboard/src/api/index.ts b/dashboard/src/api/index.ts
@@ -51,11 +51,9 @@ export async function fetchRank() {
 }
 
 function getWebSocketURL(path: string) {
-    const baseURL = axios.defaults.baseURL || ''
-    const url = new URL(baseURL)
-    url.protocol = url.protocol === 'https:' ? 'wss:' : 'ws:'
-    url.pathname = path
-    return url.toString()
+    const protocol = window.location.protocol === 'https:' ? 'wss:' : 'ws:'
+    const host = window.location.host
+    return `${protocol}//${host}${path}`
 }
 
 const ws = new WebSocket(getWebSocketURL('/ws/logs'))

Original file line number	Diff line number	Diff line change
`@@ -51,11 +51,9 @@ export async function fetchRank() {`
`51`	`51`	`}`
`52`	`52`
`53`	`53`	`function getWebSocketURL(path: string) {`
`54`		`- const baseURL = axios.defaults.baseURL \|\| ''`
`55`		`- const url = new URL(baseURL)`
`56`		`- url.protocol = url.protocol === 'https:' ? 'wss:' : 'ws:'`
`57`		`- url.pathname = path`
`58`		`- return url.toString()`
	`54`	`+ const protocol = window.location.protocol === 'https:' ? 'wss:' : 'ws:'`
	`55`	`+ const host = window.location.host`
	`56`	+ return `${protocol}//${host}${path}`
`59`	`57`	`}`
`60`	`58`
`61`	`59`	`const ws = new WebSocket(getWebSocketURL('/ws/logs'))`