Open
Description
What would you like to be added?
Why is this needed?
并不是所有网站都需要这个功能,且存在掉备案和被请喝茶的风险:用户可以填写恶意地址,然而前端可以通过点击昵称直接跳转到该地址
Anything else we need to know?
另外本以为设置为仅限注册用户评论可以避免这个问题,但是发现仅仅只是前端没有填写网站地址的地方,实际可以补全请求体 owner 的信息后增加 website
{
"raw": "test",
"content": "test",
"allowNotification": true,
"owner": {
"kind": "User",
"name": "testuser",
"displayName": "testuser",
"website": "https://www.bilibili.com"
},
"subjectRef": {
"group": "plugin.halo.run",
"kind": "Plugin",
"name": "PluginLinks",
"version": "v1alpha1"
}
}
Metadata
Assignees
Labels
No labels