From 6442c7661daa4f10cf714c48b25ec34344d1af22 Mon Sep 17 00:00:00 2001 From: Yuyi-Oak <1722157266@qq.com> Date: Sun, 2 Aug 2026 22:44:09 +0800 Subject: [PATCH] =?UTF-8?q?fix:=20=E4=BF=9D=E6=8C=81=E5=AE=98=E6=96=B9?= =?UTF-8?q?=E8=B5=84=E6=BA=90=20adapter=20URL=20=E9=94=99=E8=AF=AF?= =?UTF-8?q?=E5=A5=91=E7=BA=A6?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit --- adapters/src/official/backend.rs | 7 ++++++- 1 file changed, 6 insertions(+), 1 deletion(-) diff --git a/adapters/src/official/backend.rs b/adapters/src/official/backend.rs index e48fa03..f45454f 100644 --- a/adapters/src/official/backend.rs +++ b/adapters/src/official/backend.rs @@ -133,7 +133,12 @@ fn sanitize_component(component: &str, url: &str) -> Result { if component == "." || component == ".." || component.is_empty() { return Err(format!("官方 URL 包含不安全路径片段：{url}")); } - if component.contains('?') || component.contains('#') || component.contains('\\') { + if component.contains('?') || component.contains('#') { + return Err(format!( + "官方资源 URL 包含 query 或 fragment 等不安全路径字符：{url}" + )); + } + if component.contains('\\') { return Err(format!("官方资源 URL 包含不安全路径字符：{url}")); } Ok(component.to_string())