nyaKazuha/BlueArchiveToolkit
1
0
Fork 0
mirror of https://github.com/Yuyi-Oak/BlueArchiveToolkit.git synced 2026-09-18 07:24:55 +08:00
Code Issues Actions 1 Packages Projects Releases Wiki Activity

fix: 保持官方资源 adapter URL 错误契约

Browse Source
This commit is contained in:
nyaKazuha
2026-08-02 22:44:09 +08:00
parent 8b64cc94f3
commit 6442c7661d
1 changed files with 6 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
adapters/src/official/backend.rs
+6 -1
View File
@@ -133,7 +133,12 @@ fn sanitize_component(component: &str, url: &str) -> Result<String, String> {
if component == "." || component == ".." || component.is_empty() { if component == "." || component == ".." || component.is_empty() {
return Err(format!("官方 URL 包含不安全路径片段：{url}")); return Err(format!("官方 URL 包含不安全路径片段：{url}"));
} }
if component.contains('?') || component.contains('#') || component.contains('\\') { if component.contains('?') || component.contains('#') {
return Err(format!(
"官方资源 URL 包含 query 或 fragment 等不安全路径字符：{url}"
));
}
if component.contains('\\') {
return Err(format!("官方资源 URL 包含不安全路径字符：{url}")); return Err(format!("官方资源 URL 包含不安全路径字符：{url}"));
} }
Ok(component.to_string()) Ok(component.to_string())