mogland / core Goto Github PK

写文章时显示已有标签、分类

标签分类合并

It can return article and url

Tracking issue for:

• https://github.com/wibus-wee/GS-server/security/code-scanning/1

相关项目：

Halo Freemarker

Hexo ejs

art-template

不应该用sha1加密密码，应使用sha256更安全

问题

请求Profile接口时遇到不存在的用户时，返回的报错更像是程序运行错误的表现

示例

{
    "status": 500,
    "message": "Cannot destructure property 'password' of '_a' as it is undefined.",
    "error": "Cannot destructure property 'password' of '_a' as it is undefined.",
    "url": "/api/v1/profile?user=master1"
}

虽然Filter已将报错过滤，但是Status 500更多是发出服务器问题

根据参数的设置，选择是否启动模板引擎

防止带来不必要的启动，则是没有必要的，甚至加了性能损耗

获取图片主要颜色，提供给前端的懒加载

虽然 TypeORM 支持 MongoDB

但是还是要用 Mongoose & Typegoose，TypeORM 属实有点难用的

目前的导入配置demo

{
  "site": {
    "name": "Site Name",
    "keyword": [
      "keyword1",
      "keyword2"
    ],
    "description": "Site Description"
  },
  "master": {
    "name": "master name",
    "username": "master username",
    "mail": "master mail",
    "avatar": "master avatar",
    "url": "master url"
  },
  "categories": [
    {
      "name": "category1 name",
      "slug": "category1 slug"
    },
    {
      "name": "category2 name",
      "slug": "category2 slug"
    }
  ],
  "posts": [
    {
      "title": "post1 title",
      "slug": "post1 slug",
      "text": "post1 text",
      "summary": "post1 summary",
      "allowComment": true,
      "modified": "2015-01-01T00:00:00.000Z",
      "created": "2015-01-01T00:00:00.000Z",
      "copyright": true,
      "view": {
        "like": 0,
        "read": 0
      },
      "pin": "Date",
      "pinOrder": 0,
      "tags": [
        "tag1",
        "tag2"
      ],
      "category": "category1 slug"
    }
  ],
  "pages": [
    {
      "title": "page1 title",
      "subtitle": "page1 subtitle",
      "slug": "page1 slug",
      "text": "page1 text",
      "summary": "page1 summary",
      "order": 0,
      "allowComment": true,
      "modified": "2015-01-01T00:00:00.000Z",
      "created": "2015-01-01T00:00:00.000Z"
    }
  ],
  "comments": [
    {
      "ref_type": "Post",
      "ref": "post1 slug",
      "author": "comment author",
      "email": "comment email",
      "text": "comment text",
      "urls": "comment author urls",
      "status": 0,
      "ip": "comment ip",
      "agent": "comment agent",
      "key": "#1",
      "created": "2015-01-01T00:00:00.000Z",
      "children": [
        {
          "ref_type": "Post",
          "ref": "post1 slug",
          "author": "comment author",
          "email": "comment email",
          "text": "comment text",
          "urls": "comment author urls",
          "status": 0,
          "ip": "comment ip",
          "agent": "comment agent",
          "key": "#1",
          "created": "2015-01-01T00:00:00.000Z",
          "children": [
            {}
          ]
        }
      ]
    }
  ]
}

后端检测 会有什么cors

如果使用后端来检测友链的话，非常完美地避开了CORS的干扰。因为不存在CORS的问题

In practice, the initial initialization module is missing. You need to add an init Module for initialization and provide a place for visual operations, such as gs-admin

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.

Rate-Limited

These updates are currently rate-limited. Click on a checkbox below to force their creation now.

• chore(deps): update dependency @nestjs/swagger to v7.1.14
• chore(deps): update dependency @types/adm-zip to v0.5.4
• chore(deps): update dependency @types/bcrypt to v5.0.2
• chore(deps): update dependency @types/ejs to v3.1.5
• chore(deps): update dependency @types/js-yaml to v4.0.9
• chore(deps): update dependency @types/jsdom to v21.1.5
• chore(deps): update dependency @types/jsonwebtoken to v9.0.5
• chore(deps): update dependency @types/mime to v3.0.4
• chore(deps): update dependency @types/mime-types to v2.1.4
• chore(deps): update dependency @types/mongoose-aggregate-paginate-v2 to v1.0.12
• chore(deps): update dependency @types/supertest to v2.0.16
• chore(deps): update dependency concurrently to v8.2.2
• chore(deps): update dependency eslint-plugin-prettier to v5.0.1
• chore(deps): update dependency vitest to v0.34.6
• fix(deps): update dependency @nestjs/cache-manager to v2.1.1
• fix(deps): update dependency @nestjs/schedule to v3.0.4
• fix(deps): update dependency axios to v1.5.1
• fix(deps): update dependency cron to v2.4.4
• fix(deps): update dependency dayjs to v1.11.10
• fix(deps): update dependency mongoose to v7.5.4
• fix(deps): update dependency rimraf to v5.0.5
• fix(deps): update dependency snakecase-keys to v5.4.7
• fix(deps): update dependency uuid to v9.0.1 (uuid, @types/uuid)
• fix(deps): update nest monorepo (patch) (@nestjs/common, @nestjs/core, @nestjs/microservices, @nestjs/platform-fastify, @nestjs/schematics, @nestjs/testing)
• chore(deps): update dependency @nestjs/cli to v10.2.1
• chore(deps): update dependency @types/node to v18.18.9
• chore(deps): update dependency webpack to v5.89.0
• fix(deps): update dependency axios to v1.6.0
• fix(deps): update dependency axios-retry to v3.8.1
• fix(deps): update dependency commander to v11.1.0
• fix(deps): update dependency mongoose to v7.6.4
• fix(deps): update dependency snakecase-keys to v5.5.0
• chore(deps): update actions/setup-node action to v4
• chore(deps): update dependency @types/node to v20
• chore(deps): update docker/build-push-action action to v5
• chore(deps): update docker/login-action action to v3
• chore(deps): update docker/metadata-action action to v5
• chore(deps): update docker/setup-buildx-action action to v3
• chore(deps): update docker/setup-qemu-action action to v3
• chore(deps): update node.js to v21
• fix(deps): update dependency @fastify/multipart to v8
• fix(deps): update dependency @nestjs/schedule to v4
• fix(deps): update dependency cron to v3
• fix(deps): update dependency mongoose to v8
• 🔐 Create all rate-limited PRs at once 🔐

Open

These updates have all been created already. Click a checkbox below to force a retry/rebase of any.

• chore(deps): update dependency @nestjs/cli to v10.1.18
• chore(deps): update dependency @types/cache-manager-ioredis to v2.0.6
• chore(deps): update dependency @types/lodash to v4.14.201
• chore(deps): update dependency @types/node to v18.17.19
• chore(deps): update dependency eslint to v8.53.0
• chore(deps): update supercharge/redis-github-action action to v1.7.0
• chore(deps): update typescript-eslint monorepo to v6.10.0 (minor) (@typescript-eslint/eslint-plugin, @typescript-eslint/parser)
• fix(deps): update dependency @fastify/static to v6.12.0
• fix(deps): update dependency @typegoose/typegoose to v11.7.0
• fix(deps): update dependency @vercel/ncc to v0.38.1
• chore(deps): update actions/checkout action to v4
• Click on this checkbox to rebase all open PRs at once

Detected dependencies

• Check this box to trigger a request for Renovate to run again on this repository

• 置顶
• 筛选
• 隐藏
• 加密
• 版权自定义声明
• 是否允许在RSS输出

在 category 控制器中，这部分代码在请求的时候返回是无效的

  @Get(":slug")
  @ApiOperation({
    summary: "查询分类信息",
  })
  @ApiParam({ name: "slug", required: true, description: "分类slug", type: String })
  async findOne(@Param() param) {
    return await this.categoryService.find(param.slug);
  }

但是在数据库中是存在这一个分类的，且find方法已接收到此参数

Problems

• password字段没有加密且暴露

Why problems

严重影响系统安全性，在生产环境中是不允许的

使用RSS Spider，定时抓取友链网站的RSS，在前端显示友链网站的最新文章

Demo：https://www.ohyee.cc/friends

有关代码：https://github.com/OhYee/blotter/tree/master/tools/spider

代码中使用的数据库为 MongoDB，其次，GS-server从MySQL到MongoDB也应提上日程

when i was loading /api-docs, it return me a 404 status

Logs

Nest return an error:

[Nest] 7877  - 2021/10/01 上午6:12:39   ERROR [ExceptionHandler] Cannot read property 'model' of undefined

Problems

providers.ts

i know the model is in the host.providers.ts, but it has been defined, i didnt know why nest will return an error

also, just now nest return another error:

Nest can't resolve dependencies of the CAT_MODEL (?). Please make sure that

Problems

when i was use jest for code testing, it return an error:

Cannot find module 'src/core/function/ObjectDefine' from 'host/host.controller.ts'
Require stack:
      host/host.controller.ts
      host/host.controller.spec.ts

      1 | import { Controller, Get, HttpCode } from '@nestjs/common';
    > 2 | import objAdd from 'src/core/function/ObjectDefine';
        | ^
      3 | import { Host } from 'src/core/schemas/host.schema';
      4 | import { HostService } from 'src/core/services/host.service';
      5 |

the source code is currect, like this:

Due to MySQL's shortcomings, it does not support array data, and it is complicated to model data.

Using mongodb makes overall modeling easier and more efficient, and it is faster to pull data out than MySQL.

It is recommended to complete this refactoring plan prior to release if possible

当 CORS_SERVER 不设置时，按照程序的意思是 * 的，但是由于其中使用了RegExp，导致出现 SyntaxError

有部分功能并没有使用到isDev方法，甚至有的地方出现了直接console.log的代码，在生产环境中并不应该使用直接输出到控制台的代码（吧）？

When I use 'pnpm start', I find that Swagger cannot debug the interface normally, and there is no text box to input authorize token, which will affect the developers or the trial-and-error link

使用 Socket.IO + 劫持 process.stdout 实现

The middleware filters the crawler PHP broiler scanning path, records the access history, and captures the anomalies in the request processing process. If any of the links throws exceptions, it will return errors, and verifies the request data, filters unknown data, and throws errors of illegal types