hicccc77/WeFlow
1
0
Fork 0
mirror of https://github.com/hicccc77/WeFlow.git synced 2026-04-07 15:08:41 +00:00
Code Issues Packages Projects Releases Wiki Activity
1,341 Commits 2 Branches 64 Tags
9181490d0f35c884062a2f4d2721f299721b13cc
Commit Graph

467 Commits

Author SHA1 Message Date
xuncha
01fc5cd1a0 导出在选择完整列的时候私聊不会有群昵称 2026-04-07 19:29:35 +08:00
xuncha
c56ba6e0a1 Merge branch 'dev' into fix/http-api-security 2026-04-07 15:35:46 +08:00
fatfathao
60248b28f8 fix: 更改linux中的消息通知走D-bus总线 2026-04-07 01:30:26 +08:00
cc
d128bedffa 新增资源管理并修复了朋友圈的资源缓存路径 2026-04-06 23:32:59 +08:00
Ocean
f7f6252d0b Merge branch 'main' into fix/http-api-security 2026-04-06 14:11:17 +08:00
huanghe
62395b275d fix(security): harden HTTP API service against multiple vulnerabilities 
1. Path traversal in /api/v1/media/ — use path.resolve() and verify
   resolved path stays within media base directory
2. DoS via unlimited POST body — add 10MB size limit to parseBody()
3. Default no-auth — reject all requests when httpApiToken is not
   configured instead of silently allowing everything
4. Overly permissive CORS — restrict Access-Control-Allow-Origin from
   wildcard (*) to localhost/127.0.0.1 only
5. Timing attack on token comparison — use crypto.timingSafeEqual()
   instead of === for token verification
6. Unsafe default bind address — revert httpApiHost default from
   0.0.0.0 back to 127.0.0.1 to prevent network exposure

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
 2026-04-06 14:06:31 +08:00
cc
f910e17e53 Merge pull request #644 from fortii2/fix/export-worker-config 
#580 修复与部分引用功能相关联的无法读取解密配置的问题
 2026-04-06 13:04:13 +08:00
ethan
b8bf29277a 修复与部分引用功能相关联的无法读取解密配置的问题 2026-04-05 17:48:12 -04:00
ethan
867f85e8f2 实现 #580 引用消息支持部分引用显示 2026-04-05 17:39:22 -04:00
cc
f00525d21a 交互细节修复与代码修复 2026-04-05 10:57:49 +08:00
cc
585ec39f8e Merge branch 'dev' of https://github.com/hicccc77/WeFlow into dev 2026-04-04 23:14:57 +08:00
cc
a0189fdd0a 修复 #597；实现 #556；修复 #623与 #543；修复卡片图片问题 2026-04-04 23:14:54 +08:00
姜北尘
64010ad86b feat：添加导出文件 2026-04-04 19:45:05 +08:00
cc
512b1f6455 Merge branch 'dev' of https://github.com/hicccc77/WeFlow into dev 2026-04-04 10:57:46 +08:00
cc
5615d83f04 修复更新渠道问题 2026-04-04 10:57:43 +08:00
H3CoF6
25ef7c5d8a 更快的排序 2026-04-04 02:52:12 +08:00
H3CoF6
db429abf5b 时间排序 2026-04-04 02:34:57 +08:00
H3CoF6
19d5ae7e15 fix: 修复账号类型，删除广告账号 2026-04-04 01:53:03 +08:00
xuncha
758de9949b 新增开机自启动 [Enhancement]: 希望能够支持静默启动和开机自启动 
Fixes #516
 2026-04-03 21:08:05 +08:00
xuncha
62e23aaf23 卡片链接新增解析 2026-04-03 20:47:15 +08:00
cc
aac8eed898 Merge branch 'dev' of https://github.com/hicccc77/WeFlow into dev 2026-04-03 20:35:10 +08:00
cc
108980befb 修复了一些问题 2026-04-03 20:34:57 +08:00
xuncha
2cc0fc64a4 Merge branch 'dev' into dev 2026-04-03 20:08:03 +08:00
xuncha
67642cebfd fix(http): stream live sns media and clarify docs 2026-04-03 20:07:11 +08:00
cc
327dc85d14 优化通道结构 2026-04-03 20:05:23 +08:00
xuncha
0235ec7edc Merge branch 'dev' into dev 2026-04-03 19:49:29 +08:00
cc
1df792ec9c Merge branch 'dev' of https://github.com/hicccc77/WeFlow into dev 2026-04-03 19:35:11 +08:00
cc
a8fa6e5987 修复了一些打包问题 2026-04-03 19:34:32 +08:00
H3CoF6
ea4fff5b10 Merge remote-tracking branch 'upstream/main' into dev 2026-04-03 05:45:10 +08:00
H3CoF6
510b956649 refactor: 样式对齐 2026-04-03 05:20:58 +08:00
H3CoF6
17b8af4bc4 fix: 删除广告，增添无记录显示 2026-04-03 04:48:39 +08:00
H3CoF6
617b400884 feat: 以chat的方式实现biz的解析 2026-04-03 04:40:34 +08:00
H3CoF6
5b56b2e0be Merge remote-tracking branch 'upstream/dev' into dev 2026-04-02 23:50:35 +08:00
cc
113216b7ba 修复打包问题 2026-04-02 23:01:54 +08:00
cc
46e2e64e65 Merge branch 'dev' of https://github.com/hicccc77/WeFlow into dev 2026-04-02 22:14:52 +08:00
cc
54ed35ffb3 新增渠道更新 2026-04-02 22:14:46 +08:00
cc
7b8bd747ad Merge branch 'dev' into dev 2026-04-02 21:39:55 +08:00
hicccc77
e544f5c862 fix: add forceReopen retry logic for openMessageCursorLite 2026-04-01 04:04:53 +08:00
cc
be069e9aed 实现 #584 2026-03-31 21:24:31 +08:00
hejk
e4872a78f5 feat(http): change default API host to 0.0.0.0 for external access 
- 修改 httpApiHost 默认值从 127.0.0.1 到 0.0.0.0
- 允许 HTTP API 服务接受外网访问
- 用户需要配置 httpApiToken 以确保安全

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
 2026-03-31 11:32:46 +08:00
H3CoF6
73a948c528 feat: 初步实现服务号/公众号解析 2026-03-30 20:36:20 +08:00
hejinkang
71238d4a01 Merge branch 'dev' into dev 2026-03-30 10:04:56 +08:00
hicccc77
ee5e7d2586 fix: 修复微信重装后 openMessageCursor 返回 -3 (no message db) 的问题 
- 新增 forceReopen() 方法：清空路径缓存后强制重新初始化账号连接
- openMessageCursor 在 result=-3 时自动触发 forceReopen 并重试一次
- 改善 -3 错误的提示文案，引导用户重新指定数据目录

修复 #591
 2026-03-29 19:18:20 +08:00
hicccc77
4f4e09c3de fix: 修复微信重装后 openMessageCursor 返回 -3 (no message db) 的问题 
- 新增 forceReopen() 方法：清空路径缓存后强制重新初始化账号连接
- openMessageCursor 在 result=-3 时自动触发 forceReopen 并重试一次
- 改善 -3 错误的提示文案，引导用户重新指定数据目录

修复 #591
 2026-03-29 16:07:09 +08:00
hicccc77
26c6700152 fix: 修复 CodeQL code scanning warning 问题 2026-03-28 21:12:29 +08:00
hicccc77
bd70a7bfa8 Revert "fix: 修复 Linux 下内存扫描找不到微信进程的问题\n\n增加 pidof/pgrep/ps aux 三重兜底逻辑，兼容不同发行版\n（flatpak、AppImage、wechat-bin 等安装方式），解决 #575" 
This reverts commit 3fb09bad0d.
 2026-03-28 19:28:45 +08:00
hicccc77
3fb09bad0d fix: 修复 Linux 下内存扫描找不到微信进程的问题\n\n增加 pidof/pgrep/ps aux 三重兜底逻辑，兼容不同发行版\n（flatpak、AppImage、wechat-bin 等安装方式），解决 #575 2026-03-28 19:05:21 +08:00
hicccc77
22d8049c2c Revert "fix: 兼容微信新目录结构多一层嵌套导致账号目录识别失败的问题" 
This reverts commit 5f6b0e8960.
 2026-03-28 17:30:56 +08:00
hicccc77
5f6b0e8960 fix: 兼容微信新目录结构多一层嵌套导致账号目录识别失败的问题 
修复 scanWxids 和 scanWxidCandidates 在 2.0b4.0.9/xwechat_files/wxid_xxx
结构下扫描不到账号目录的问题，增加往下多扫一层的兜底逻辑

Fixes #541
 2026-03-28 17:28:52 +08:00
hicccc77
32cc74f99c merge: 同步 main 最新代码到 dev（依赖更新、版本 4.3.0、资源文件） 2026-03-28 16:54:47 +08:00