Feat:访客图库体验优化;Discord渠道访问优化

2026-02-01 22:47:37 +00:00 · 2026-01-03 01:12:41 +08:00
parent ecfd55d5b6
commit 03afed89f7
31 changed files with 44 additions and 25 deletions
--- a/css/289.f7890ec7.css
+++ b/css/289.f7890ec7.css
--- a/css/289.f7890ec7.css.gz
+++ b/css/289.f7890ec7.css.gz
--- a/css/424.0b141552.css
+++ b/css/424.0b141552.css
--- a/css/424.0b141552.css.gz
+++ b/css/424.0b141552.css.gz
--- a/css/667.a3c83e09.css
+++ b/css/667.a3c83e09.css
--- a/css/667.a3c83e09.css.gz
+++ b/css/667.a3c83e09.css.gz
--- a/css/72.15fbe389.css.gz
+++ b/css/72.15fbe389.css.gz
--- a/functions/file/fileTools.js
+++ b/functions/file/fileTools.js
@@ -5,7 +5,7 @@ export function isDomainAllowed(context) {
    const { Referer, securityConfig, url } = context;

    const allowedDomains = securityConfig.access.allowedDomains;
-    
+
    if (Referer) {
        try {
            const refererUrl = new URL(Referer);
@@ -17,7 +17,7 @@ export function isDomainAllowed(context) {
                    let domainPattern = new RegExp(`(^|\\.)${domain.replace('.', '\\.')}$`); // Escape dot in domain
                    return domainPattern.test(refererUrl.hostname);
                });
-                
+
                if (!isAllowed) {
                    return false;
                }
@@ -30,19 +30,37 @@ export function isDomainAllowed(context) {
    return true;
 }

+// 判断请求是否来自公开图库页面 (/browse 或 /browse/*)
+export function isFromPublicBrowse(Referer, origin) {
+    if (!Referer) return false;
+    try {
+        const refererUrl = new URL(Referer);
+        // 检查是否来自同源的 /browse 或 /browse/* 路径
+        if (refererUrl.origin === origin) {
+            const pathname = refererUrl.pathname;
+            if (pathname === '/browse' || pathname.startsWith('/browse/')) {
+                return true;
+            }
+        }
+    } catch (e) {
+        return false;
+    }
+    return false;
+}
+
 // 公共响应头设置函数
 export function setCommonHeaders(headers, encodedFileName, fileType, Referer, url) {
    headers.set('Content-Disposition', `inline; filename="${encodedFileName}"; filename*=UTF-8''${encodedFileName}`);
    headers.set('Access-Control-Allow-Origin', '*');
    headers.set('Accept-Ranges', 'bytes');
    headers.set('Vary', 'Range');
-    
+
    if (fileType) {
        headers.set('Content-Type', fileType);
    }
-    
-    // 根据Referer设置CDN缓存策略
-    if (Referer && Referer.includes(url.origin)) {
+
+    // 根据Referer设置CDN缓存策略（排除公开图库页面的请求）
+    if (Referer && Referer.includes(url.origin) && !isFromPublicBrowse(Referer, url.origin)) {
        headers.set('Cache-Control', 'private, max-age=86400'); // 本地缓存 1天
    } else {
        headers.set('Cache-Control', 'public, max-age=2592000'); // CDN缓存 30天
@@ -59,7 +77,7 @@ export function setRangeHeaders(headers, rangeStart, rangeEnd, totalSize) {
 // 处理HEAD请求的公共函数
 export function handleHeadRequest(headers, etag = null) {
    const responseHeaders = new Headers();
-    
+
    // 复制关键头部
    responseHeaders.set('Content-Length', headers.get('Content-Length') || '0');
    responseHeaders.set('Content-Type', headers.get('Content-Type') || 'application/octet-stream');
@@ -67,11 +85,11 @@ export function handleHeadRequest(headers, etag = null) {
    responseHeaders.set('Access-Control-Allow-Origin', headers.get('Access-Control-Allow-Origin') || '*');
    responseHeaders.set('Accept-Ranges', headers.get('Accept-Ranges') || 'bytes');
    responseHeaders.set('Cache-Control', headers.get('Cache-Control') || 'public, max-age=2592000');
-    
+
    if (etag) {
        responseHeaders.set('ETag', etag);
    }
-    
+
    return new Response(null, {
        status: 200,
        headers: responseHeaders,
@@ -112,8 +130,9 @@ export async function returnWithCheck(context, imgRecord) {

    const response = new Response('success', { status: 200 });

-    // Referer header equal to the dashboard page or upload page
-    if (request.headers.get('Referer') && request.headers.get('Referer').includes(url.origin)) {
+    // Referer header equal to the dashboard page or upload page (排除公开图库页面的请求)
+    const referer = request.headers.get('Referer');
+    if (referer && referer.includes(url.origin) && !isFromPublicBrowse(referer, url.origin)) {
        //show the image
        return response;
    }
@@ -139,7 +158,7 @@ export async function returnWithCheck(context, imgRecord) {
            return response;
        }
    }
-    
+
    // other cases
    return response;
 }
--- a/index.html
+++ b/index.html
@@ -1 +1 @@
-<!doctype html><html lang=""><head><meta charset="utf-8"><meta http-equiv="X-UA-Compatible" content="IE=edge"><meta name="viewport" content="width=device-width,initial-scale=1"><link rel="icon" href="/logo.png"><link rel="apple-touch-icon" href="/logo.png"><link rel="mask-icon" href="/logo.png" color="#f4b400"><meta name="description" content="Sanyue ImgHub - A modern file hosting platform"><meta name="keywords" content="Sanyue, ImgHub, file hosting, image hosting, cloud storage"><meta name="author" content="SanyueQi"><title>Sanyue ImgHub</title><script defer="defer" src="/js/chunk-vendors.780b6559.js"></script><script defer="defer" src="/js/app.d2aa04d7.js"></script><link href="/css/chunk-vendors.4363ed49.css" rel="stylesheet"><link href="/css/app.14879ca1.css" rel="stylesheet"></head><body><noscript><strong>We're sorry but sanyue_imghub doesn't work properly without JavaScript enabled. Please enable it to continue.</strong></noscript><div id="app"></div></body></html>
+<!doctype html><html lang=""><head><meta charset="utf-8"><meta http-equiv="X-UA-Compatible" content="IE=edge"><meta name="viewport" content="width=device-width,initial-scale=1"><link rel="icon" href="/logo.png"><link rel="apple-touch-icon" href="/logo.png"><link rel="mask-icon" href="/logo.png" color="#f4b400"><meta name="description" content="Sanyue ImgHub - A modern file hosting platform"><meta name="keywords" content="Sanyue, ImgHub, file hosting, image hosting, cloud storage"><meta name="author" content="SanyueQi"><title>Sanyue ImgHub</title><script defer="defer" src="/js/chunk-vendors.780b6559.js"></script><script defer="defer" src="/js/app.41abafbc.js"></script><link href="/css/chunk-vendors.4363ed49.css" rel="stylesheet"><link href="/css/app.14879ca1.css" rel="stylesheet"></head><body><noscript><strong>We're sorry but sanyue_imghub doesn't work properly without JavaScript enabled. Please enable it to continue.</strong></noscript><div id="app"></div></body></html>
--- a/index.html.gz
+++ b/index.html.gz
--- a/js/289.8c3b6ce7.js
+++ b/js/289.8c3b6ce7.js
--- a/js/289.8c3b6ce7.js.gz
+++ b/js/289.8c3b6ce7.js.gz
--- a/js/289.8c3b6ce7.js.map
+++ b/js/289.8c3b6ce7.js.map
--- a/js/289.8c3b6ce7.js.map.gz
+++ b/js/289.8c3b6ce7.js.map.gz
--- a/js/424.28a751ba.js.gz
+++ b/js/424.28a751ba.js.gz
--- a/js/424.28a751ba.js.map
+++ b/js/424.28a751ba.js.map
--- a/js/424.28a751ba.js.map.gz
+++ b/js/424.28a751ba.js.map.gz
--- a/js/667.bbd60d43.js
+++ b/js/667.bbd60d43.js
--- a/js/667.bbd60d43.js.gz
+++ b/js/667.bbd60d43.js.gz
--- a/js/667.bbd60d43.js.map
+++ b/js/667.bbd60d43.js.map
--- a/js/667.bbd60d43.js.map.gz
+++ b/js/667.bbd60d43.js.map.gz
--- a/js/72.8c39bf3e.js
+++ b/js/72.8c39bf3e.js
--- a/js/72.8c39bf3e.js.gz
+++ b/js/72.8c39bf3e.js.gz
--- a/js/72.8c39bf3e.js.map
+++ b/js/72.8c39bf3e.js.map
--- a/js/72.8c39bf3e.js.map.gz
+++ b/js/72.8c39bf3e.js.map.gz
--- a/js/app.41abafbc.js
+++ b/js/app.41abafbc.js
--- a/js/app.41abafbc.js.gz
+++ b/js/app.41abafbc.js.gz
--- a/js/app.41abafbc.js.map
+++ b/js/app.41abafbc.js.map
--- a/js/app.41abafbc.js.map.gz
+++ b/js/app.41abafbc.js.map.gz
--- a/js/app.d2aa04d7.js.gz
+++ b/js/app.d2aa04d7.js.gz
--- a/js/app.d2aa04d7.js.map.gz
+++ b/js/app.d2aa04d7.js.map.gz