feat: 安全性提升

src/onebot/config/config.ts

@@ -1,11 +1,10 @@
 import { Type, Static } from '@sinclair/typebox';
 import Ajv from 'ajv';
-
 const HttpServerConfigSchema = Type.Object({
     name: Type.String({ default: 'http-server' }),
     enable: Type.Boolean({ default: false }),
     port: Type.Number({ default: 3000 }),
-    host: Type.String({ default: '0.0.0.0' }),
+    host: Type.String({ default: '127.0.0.1' }),
     enableCors: Type.Boolean({ default: true }),
     enableWebsocket: Type.Boolean({ default: true }),
     messagePostFormat: Type.String({ default: 'array' }),
@@ -17,7 +16,7 @@ const HttpSseServerConfigSchema = Type.Object({
     name: Type.String({ default: 'http-sse-server' }),
     enable: Type.Boolean({ default: false }),
     port: Type.Number({ default: 3000 }),
-    host: Type.String({ default: '0.0.0.0' }),
+    host: Type.String({ default: '127.0.0.1' }),
     enableCors: Type.Boolean({ default: true }),
     enableWebsocket: Type.Boolean({ default: true }),
     messagePostFormat: Type.String({ default: 'array' }),
@@ -39,7 +38,7 @@ const HttpClientConfigSchema = Type.Object({
 const WebsocketServerConfigSchema = Type.Object({
     name: Type.String({ default: 'websocket-server' }),
     enable: Type.Boolean({ default: false }),
-    host: Type.String({ default: '0.0.0.0' }),
+    host: Type.String({ default: '127.0.0.1' }),
     port: Type.Number({ default: 3001 }),
     messagePostFormat: Type.String({ default: 'array' }),
     reportSelfMessage: Type.Boolean({ default: false }),

src/webui/index.ts

@@ -163,14 +163,11 @@ export async function InitWebUi(logger: LogWrapper, pathWrapper: NapCatPathWrapp
     server.listen(port, host, async () => {
         // 启动后打印出相关地址
         let searchParams = { token: token };
-        if (host !== '' && host !== '0.0.0.0') {
+        if (host !== '') {
             logger.log(
                 `[NapCat] [WebUi] WebUi User Panel Url: ${createUrl(host, port.toString(), '/webui', searchParams)}`
             );
         }
-        logger.log(
-            `[NapCat] [WebUi] WebUi Local Panel Url: ${createUrl('127.0.0.1', port.toString(), '/webui', searchParams)}`
-        );
     });
     // ------------Over！------------
 }

src/webui/src/helper/config.ts

@@ -9,12 +9,12 @@ import { deepMerge } from '../utils/object';
 import { themeType } from '../types/theme';
 
 // 限制尝试端口的次数，避免死循环
-
 // 定义配置的类型
 const WebUiConfigSchema = Type.Object({
     host: Type.String({ default: '0.0.0.0' }),
     port: Type.Number({ default: 6099 }),
-    token: Type.String({ default: 'napcat' }),
+    // napcat+<月份日>，例如 napcat0625
+    token: Type.String({ default: 'napcat' + (new Date().getMonth() + 1).toString().padStart(2, '0') + new Date().getDate().toString().padStart(2, '0') }),
     loginRate: Type.Number({ default: 10 }),
     autoLoginAccount: Type.String({ default: '' }),
     theme: themeType,

src/webui/src/utils/url.ts

@@ -13,7 +13,6 @@ import { isIP } from 'node:net';
  * @example normalizeHost('2001:4860:4801:51::27') => '[2001:4860:4801:51::27]'
  */
 export const normalizeHost = (host: string) => {
-    if (host === '0.0.0.0') return '127.0.0.1';
     if (isIP(host) === 6) return `[${host}]`;
     return host;
 };