fix: 修复漏洞

Author: SilianZ

core/storages/alist.py

@@ -125,13 +125,13 @@ async def express(self, hash: str, request: web.Request, response) -> Dict[str,
             data = await res.json()
             if data["code"] != 200:
                 response = web.HTTPNotFound()
-                await response.prepare(request)
                 return {"bytes": 0, "hits": 0}
             try:
                 response = web.HTTPFound(data["data"]["raw_url"])
                 response.headers["x-bmclapi-hash"] = hash
                 logger.debug(data)
                 logger.debug(response)
+                await response.prepare(request)
                 return {"bytes": data["data"]["size"], "hits": 1}
             except Exception as e:
                 response = web.HTTPError(text=e)