GithubStar/EasySpider
1
0
Fork 0
mirror of https://github.com/NaiboWang/EasySpider.git synced 2026-10-29 07:27:39 +08:00
Code Issues Packages Projects Releases Wiki Activity
717 Commits 2 Branches 11 Tags
master
Commit Graph
43 Commits
Author SHA1 Message Date
Sebastion 598f6a0ffa fix(ExecuteStage): prevent CWE-95 code injection in Field[...] templates 
Field["x"] tokens substituted into the body of an e v a l("...") or JS("...")
template were inserted as raw source. Because outputParameters values come
from scraped page content, any attacker controlling a crawled page could
break out of the surrounding string literal and execute arbitrary Python on
the user's machine (or arbitrary JS in the browser context).

Substitute Field["x"] inside Python expression bodies via repr() and inside
JS() bodies via json.dumps() so the scraped value is always a well-formed,
properly-escaped string literal that cannot escape its quoting. Field
expansions outside of those calls are still inserted as plain text.
 2026-05-11 22:45:48 +01:00
naibo a971b52d38 Auto Rename Download Files 2024-01-05 22:12:53 +08:00
naibo a365783e41 Auto Rename Download Files 2024-01-05 17:52:50 +08:00
naibo c5a4b11dfb Two new custom operations 2023-12-30 16:05:29 +08:00
naibo 4f858ffee1 New Download Location 2023-12-28 20:01:06 +08:00
naibo 13b51ffdcc JavaScript输入文字！！！ 2023-12-23 12:36:35 +08:00
naibo ed0768ca51 Official Version of 0.6.0 2023-12-20 14:08:32 +08:00
naibo 0b0fca5fcf Remove Duplicate Data!!! 2023-12-20 04:33:29 +08:00
naibo ae3ae40640 Split Line 2023-12-19 22:02:45 +08:00
naibo 7901ee2877 Ctrl+Click & Hint of mobile mode & Default Browser Location & Click with coordinate 2023-12-18 16:23:00 +08:00
naibo ea2d679dd4 New Features 2023-12-17 13:14:47 +08:00
naibo 8c9cf4c023 Rename para to param 2023-12-15 11:29:53 +08:00
naibo be2f980734 Navigation about Next Page!!! 2023-12-14 08:06:24 +08:00
naibo c3bab575f4 Bug Fix and Picture download update 2023-12-12 01:30:13 +08:00
naibo bad6e5bdf5 Email Sent 2023-12-10 03:55:15 +08:00
naibo 67949983eb Speed UP!!! 2023-12-09 19:24:41 +08:00
naibo 5b1d653626 Speed UP!!! 2023-12-09 04:44:40 +08:00
naibo bf608c4c24 MySQL Code Optimize 2023-12-08 06:47:56 +08:00
naibo e4037e221d V0.6.0 Pre 2023-12-07 03:05:50 +08:00
naibo cffaeeb6fa V0.6.0 Pre 2023-12-05 05:12:17 +08:00
naibo 82dac5ad00 V0.6.0 Pre 2023-12-04 02:59:52 +08:00
naibo 5921d84140 可选是否生成新行以解决多行问题 2023-09-05 19:55:32 +08:00
naibo 593d01ed9e EVAL in Code 2023-08-14 19:31:53 +08:00
NaiboWang-Alienware 145c766221 单个单元格限制提醒 2023-07-25 18:03:38 +08:00
naibo 528ae7a132 JSON Format Support 2023-07-24 14:27:44 +08:00
NaiboWang-Alienware f8c575f0ec Update error info for mysql 2023-07-20 11:22:11 +08:00
naibo f847ac6efd Option Select by Loop 2023-07-15 05:36:26 +08:00
naibo f7496626a8 XPath can be replaced by Field['fieldname'] 2023-07-14 03:25:20 +08:00
Naibo_Mac 8c5267d66c MacOS version v0.3.5 2023-07-10 08:58:48 +08:00
naibo 35b9494d42 Change Database config name 2023-07-10 04:29:43 +08:00
naibo fb99764222 Long Press p 2023-07-09 20:56:44 +08:00
naibo 812faf52cc Long Press p 2023-07-09 20:36:02 +08:00
naibo 19118240c8 Change keyboard module 2023-07-09 09:52:55 +08:00
naibo bb6e2b2881 Change keyboard module 2023-07-09 08:59:11 +08:00
Naibo Wang 261fb13006 Linux V0.3.5 2023-07-09 08:39:00 +08:00
naibo 22cb45061c XPath bug fix 2023-07-08 20:18:57 +08:00
naibo 751fa6e055 UC Update Iframe 2023-07-08 08:21:15 +08:00
naibo 548414b12f 可以选择部分字段不输出到文件或数据库 2023-07-07 22:23:24 +08:00
naibo dbab4e5055 Change UI 2023-07-07 07:11:08 +08:00
naibo 741e3c4165 MySQL Support 2023-07-07 06:55:51 +08:00
NaiboWang-Alienware f84eb673c8 URL pattern detect 2023-07-06 05:43:37 +08:00
NaiboWang-Alienware a0dbaea00f Get and replace cookie 2023-07-06 03:44:05 +08:00
NaiboWang-Alienware 1329ab6ca7 Iframe处理 - 设计阶段 2023-07-04 06:56:04 +08:00