fix: 修复漏洞

Author: SilianZ

core/cluster.py

@@ -107,6 +107,7 @@ def __init__(self) -> None:
         self.failed_filelist = FileList(files=[])
         self.enabled = False
         self.site = None
+        self.want_enable = False
         self.scheduler = None
         self.start_time = int(time.time() * 1000)
 
@@ -312,7 +313,7 @@ async def listen(self, https: bool, port: int) -> None:
     async def enable(self) -> None:
         if self.enabled:
             return
-
+        
         logger.tinfo("cluster.info.enabling")
         future = asyncio.Future()
 
@@ -476,7 +477,8 @@ async def connect(self) -> None:
         async def _() -> None:
             logger.tsuccess("client.success.connected")
             await self.disable()
-            await self.enable()
+            if self.want_enable:
+                await self.enable()
             if self.scheduler:
                 self.scheduler.resume()
 

core/router.py

@@ -53,8 +53,9 @@ async def _(request: web.Request) -> web.Response:
                 response = None
                 for storage in self.storages:
                     if isinstance(storage, AListStorage):
-                        await storage.measure(size, response)
-                        await response.prepare(request)
+                        url = storage.measure(size, response)
+                        response = web.HTTPFound(url)
+                        response.prepare(request)                        
                         return response
 
                 buffer = b"\x00\x66\xcc\xff" * 256 * 1024

core/storages/alist.py

@@ -89,7 +89,7 @@ async def getFileList(dir: str, pbar: tqdm) -> List[FileInfo]:
 
         return FileList(files=missing_files)
 
-    async def measure(self, size: int, response):
+    async def measure(self, size: int) -> str:
         file_path = f"{self.path}/measure/.{size}"
         try:
             async with aiohttp.ClientSession(self.url, headers=self.headers) as session:
@@ -98,10 +98,7 @@ async def measure(self, size: int, response):
                 data = await response.json()
                 logger.debug(data)
                 if data["code"] == 200:
-                    logger.debug(1)
-                    response = web.HTTPFound(data["data"]["raw_url"])
-                    return
-
+                    return data["data"]["raw_url"]
                 if data["code"] != 200:
                     logger.debug(2)
                     try:
@@ -120,9 +117,7 @@ async def measure(self, size: int, response):
                 data = await response.json()
                 logger.debug(data)
                 logger.debug(3)
-                response = web.HTTPFound(data["data"]["raw_url"])
-                response.prepare(request)
-                return
+                return data["data"]["raw_url"]
         except Exception as e:
             logger.terror("storage.error.alist.measure", e=e)
             return