clz/clash_for_linux
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Security fix: API secret value changed to randomly generated 64-bit string at each startup.

Browse Source
This commit is contained in:
wanhebin 2023-04-06 22:45:32 +08:00
parent 9c06fa8d8c
commit 0b14f39ce3
1 changed files with 3 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
start.sh
View File

@ -100,6 +100,9 @@ cat $Temp_Dir/proxy.txt >> $Temp_Dir/config.yaml
Work_Dir=$(cd $(dirname $0); pwd) Work_Dir=$(cd $(dirname $0); pwd)
Dashboard_Dir="${Work_Dir}/dashboard/public" Dashboard_Dir="${Work_Dir}/dashboard/public"
sed -ri "s@^# external-ui:.*@external-ui: ${Dashboard_Dir}@g" $Conf_Dir/config.yaml sed -ri "s@^# external-ui:.*@external-ui: ${Dashboard_Dir}@g" $Conf_Dir/config.yaml
# 随机生成并更新 API Secret
Secret=`openssl rand -hex 32`
sed -r -i '/^secret: /s@(secret: ).*@\1'${Secret}'@g' $Conf_Dir/config.yaml
# Get RESTful API Secret # Get RESTful API Secret
Secret=`grep '^secret: ' $Conf_Dir/config.yaml | grep -Po "(?<=secret: ').*(?=')"` Secret=`grep '^secret: ' $Conf_Dir/config.yaml | grep -Po "(?<=secret: ').*(?=')"`