GithubStar/EasySpider
1
0
Fork 0
mirror of https://github.com/NaiboWang/EasySpider.git synced 2026-10-17 05:20:46 +08:00
Code Issues Packages Projects Releases Wiki Activity
713 Commits 2 Branches 11 Tags
master
Commit Graph

349 Commits

Author SHA1 Message Date
Naibo Wang c61473beb2 Change trail to trial, fix typo 2026-10-13 01:20:30 +08:00
Sora fce434d960 fix(macOS): stabilize command-line execution path 2026-08-24 00:37:37 +08:00
Sora 9c1ccac473 fix(macOS): avoid translocated execution paths 2026-08-22 11:55:19 +08:00
Sora b3493b139d Fix Linux Chrome helper permissions 2026-08-18 22:16:47 +08:00
Sora d6548ed75a Prepare EasySpider 0.6.5 cross-platform release 2026-08-18 18:06:08 +08:00
Naibo Wang 676486bc67 Bug fix about the parameter names when importing from excel files 2026-05-22 19:59:53 +08:00
Sebastion 38e63282e8 fix(server): restrict CORS and bind local API to loopback (CWE-352) 
The local Electron HTTP server (server.js) exposes endpoints that spawn
child processes (/executeTask), read/write task and config files
(/manageTask, /setUserDataFolder, /deleteTask), and otherwise perform
state-changing actions, but it has no authentication and previously sent
'Access-Control-Allow-Origin: *' on every response.

Because the server listens on a predictable local port, any website the
user visited could issue cross-origin POSTs to drive task creation and
execution (CWE-352 / CSRF).

This change:
- Removes the unconditional ACAO:* header.
- Echoes Access-Control-Allow-Origin only for loopback origins
  (http(s)://localhost, 127.0.0.1, [::1]).
- Rejects requests with a non-local Origin header with HTTP 403.
- Handles CORS preflight (OPTIONS) safely.
- Binds the HTTP server (port 8074) and Express upload server
  (port 8075) to 127.0.0.1 only, so they are not exposed on the LAN.
- Restricts the express 'cors' middleware to the same loopback allowlist.
 2026-05-11 15:30:25 +01:00
sora-ot a0d3798520 Enable WebExtension debugging and install extensions 
Added options for WebExtension debugging and installation.
 2026-02-25 21:41:56 +08:00
sora-ot 4d469c7f68 upload some folders 
upload EasySpider_en, EasySpider_zh and selenium-webdriver-bidi-webExtension folders.
 2026-02-25 21:36:01 +08:00
Naibo Wang a7fde17f71 Merge pull request #882 from yan-xiaoo/remote-access-dev 
Support remote control with backend api
 2025-11-28 21:34:18 +08:00
Naibo Wang 1af94e8008 Merge pull request #876 from yan-xiaoo/publish-improve-dev 
改进 macOS 下的部分打包流程
 2025-07-21 00:54:35 +08:00
Naibo_Mac_M2 c937bb2c77 Solve the problem that the extension cannot be loaded after chrome version 137 2025-07-18 13:13:53 +08:00
Li Yanxiao 92d58490f0 feat: support remote execution, termination and reading logs 2025-07-10 17:18:52 +08:00
Li Yanxiao 26e204dc8e feat: Support execute task remotely by api 2025-07-05 23:15:24 +08:00
Li Yanxiao 5a844b186a fix: Fix issues related to context menu in the flow chart page. 
1. Fixes the issue that right click on an element would trigger it to be focused in the browser.
2. Fixes the issue that after scrolling the window, the context menu might be generated in a improper location.
 2025-07-05 19:56:23 +08:00
Li Yanxiao adf7664b07 fix: 错误的注释了下载命令 2025-07-04 22:48:59 +08:00
Li Yanxiao b3a1e64e72 feat: 添加 adhoc 签名 
在 Electron 打包后通过 codesign 程序为应用增加一个 adhoc 空签名。此签名不能让软件通过门禁认证，但可以让门禁显示“Apple无法验证“EasySpider”是否包含可能危害Mac安全或泄漏隐私的恶意软件。”而不是“EasySpider 已损坏，你应将其移动到废纸篓“。
 2025-07-04 22:47:00 +08:00
Li Yanxiao c56f47b2c9 fix: 修改 macOS 下内嵌 Chrome 的权限 
修改 macOS 下内嵌 Chrome 的权限为 755（可读写）而非 555（不可写），解决了下次打包时无法删除上次打包生成的应用的问题。
 2025-07-04 22:43:40 +08:00
Li Yanxiao 6630c6627b feat: update_chrome.py 在 macOS 下自动获得 Chrome 版本号 
添加在 macOS 下，通过读取「应用程序」文件夹下可能存在的 Chrome 应用内容从而获得 Chrome 版本号的功能。
 2025-07-01 22:19:11 +08:00
Naibo Wang ef514efe15 Upgrade multer 2025-05-22 21:15:05 +08:00
Naibo Wang 967f5b8033 Change License 2025-02-17 21:10:38 +08:00
naibo 2cf33794f1 Fix bug: when cannot find elements, switch back to the original handle instead of one of the first two handles 2025-01-06 13:26:59 +08:00
naibo ad956be10d Fix bug for the URL shown in the task list 2025-01-06 01:30:48 +08:00
naibo 333dcd3ff4 New way to open MacOS program 2025-01-03 01:59:18 +08:00
Naibo_Mac_M2 34ed41110a New script for copying all code files to the Code folder 2025-01-02 14:50:14 +08:00
naibo 02cd8599b0 Optimize reading 2024-12-31 03:16:34 +08:00
naibo 2feede55db New way to show/hide toolkits 2024-12-31 02:52:48 +08:00
Naibo Wang 33dda444d7 Specified User Folder 2024-12-31 01:54:51 +08:00
Naibo Wang d7ccb22d01 Specified User Folder 2024-12-31 01:31:40 +08:00
naibo f7a842eed6 Version 0.6.3 2024-12-31 00:14:32 +08:00
dependabot[bot] 4f0851e361 Bump path-to-regexp and express in /ElectronJS 
Bumps [path-to-regexp](https://github.com/pillarjs/path-to-regexp) to 0.1.12 and updates ancestor dependency [express](https://github.com/expressjs/express). These dependencies need to be updated together.


Updates `path-to-regexp` from 0.1.10 to 0.1.12
- [Release notes](https://github.com/pillarjs/path-to-regexp/releases)
- [Changelog](https://github.com/pillarjs/path-to-regexp/blob/master/History.md)
- [Commits](https://github.com/pillarjs/path-to-regexp/compare/v0.1.10...v0.1.12)

Updates `express` from 4.21.0 to 4.21.2
- [Release notes](https://github.com/expressjs/express/releases)
- [Changelog](https://github.com/expressjs/express/blob/4.21.2/History.md)
- [Commits](https://github.com/expressjs/express/compare/4.21.0...4.21.2)

---
updated-dependencies:
- dependency-name: path-to-regexp
  dependency-type: indirect
- dependency-name: express
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
 2024-12-30 16:00:41 +00:00
naibo c56e87120d Version 0.6.3 2024-12-30 23:59:33 +08:00
Naibo Wang cc9a8082da Update README.md 2024-11-25 17:32:09 +08:00
Naibo Wang 3daf5e8c21 Update README.md 2024-11-25 17:30:36 +08:00
Naibo Wang 8f5d7a3a52 Update main.js about execute.bat name 2024-11-25 17:23:45 +08:00
Naibo Wang b611ddb6cd Update README.md 2024-10-15 13:42:48 +08:00
Naibo Wang abfac8c342 Update README.md 2024-10-15 13:41:45 +08:00
naibo 951a39fff6 Update Readme for building Electron Program 2024-10-15 05:42:06 +08:00
naibo 6d3d10f7a7 Update Readme for building Electron Program 2024-10-15 05:39:51 +08:00
naibo 46b1959564 Update Readme for building Electron Program 2024-10-15 05:33:15 +08:00
naibo e14896d7cd Update Readme for building Electron Program 2024-10-15 05:15:33 +08:00
naibo 450dfa1a77 Add ElectronJS package speedup solution for Machines in China 2024-10-14 03:40:13 +08:00
naibo 3b907ba382 Add ElectronJS package speedup solution for Machines in China 2024-10-14 03:14:19 +08:00
naibo 70dd90470f Add ElectronJS package speedup solution for Machines in China 2024-10-14 02:49:01 +08:00
dependabot[bot] c967db3dac Bump path-to-regexp and express in /ElectronJS 
Bumps [path-to-regexp](https://github.com/pillarjs/path-to-regexp) to 0.1.10 and updates ancestor dependency [express](https://github.com/expressjs/express). These dependencies need to be updated together.


Updates `path-to-regexp` from 0.1.7 to 0.1.10
- [Release notes](https://github.com/pillarjs/path-to-regexp/releases)
- [Changelog](https://github.com/pillarjs/path-to-regexp/blob/master/History.md)
- [Commits](https://github.com/pillarjs/path-to-regexp/compare/v0.1.7...v0.1.10)

Updates `express` from 4.19.2 to 4.21.0
- [Release notes](https://github.com/expressjs/express/releases)
- [Changelog](https://github.com/expressjs/express/blob/4.21.0/History.md)
- [Commits](https://github.com/expressjs/express/compare/4.19.2...4.21.0)

---
updated-dependencies:
- dependency-name: path-to-regexp
  dependency-type: indirect
- dependency-name: express
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
 2024-09-17 22:28:58 +00:00
naibo e74915d94c Typo Fix 2024-08-21 11:57:08 +08:00
naibo df62f710e3 Change F7 to F2 2024-08-21 11:40:21 +08:00
naibo 118241ba6d 修复任意文件读取漏洞 2024-08-10 17:32:01 +08:00
naibo bf320abf1a Update Complie and Debug Video Address 2024-07-12 19:39:46 +08:00
naibo 7c0ab0e519 More XPaths Bug Fix 2024-07-12 17:12:45 +08:00