From cdf2886a1a3e490ee6c45b85f02cb88598fe5eae Mon Sep 17 00:00:00 2001 From: Alexey Date: Thu, 29 Jan 2026 15:58:22 +0300 Subject: [PATCH 1/3] v.qq.com: add static test URLs, there are no hrefs in selector yet --- plugins/domains/v.qq.com.js | 23 +++++++++++++---------- 1 file changed, 13 insertions(+), 10 deletions(-) diff --git a/plugins/domains/v.qq.com.js b/plugins/domains/v.qq.com.js index dfc852e2c..fc9b9e0a6 100644 --- a/plugins/domains/v.qq.com.js +++ b/plugins/domains/v.qq.com.js @@ -1,7 +1,7 @@ const re = [ - /^https?:\/\/v\.qq\.com\/page\/\w\/\w\/\w\/(\w+)\.html$/i, - /^https?:\/\/v\.qq\.com\/\w+\/page\/(\w+)\.html$/i, - /^https?:\/\/v\.qq\.com\/\w+\/\w\/\w+\.html\?vid=(\w+)$/i, + /^https?:\/\/v\.qq\.com\/page\/\w\/\w\/\w\/(\w+)\.html/i, + /^https?:\/\/v\.qq\.com\/\w+\/page\/(\w+)\.html/i, + /^https?:\/\/v\.qq\.com\/\w+\/\w\/\w+\.html\?vid=(\w+)/i, /^https?:\/\/v\.qq\.com\/iframe\/(?:player|preview)\.html\?vid=(\w+)/i, /^https?:\/\/v\.qq\.com\/\w\/cover\/\w+\/(\w+)\.html/i ]; @@ -23,11 +23,14 @@ export default { }; }, - tests: [{ - page: "https://v.qq.com/", - selector: ".video-banner-item a.poster-pic-container", - getUrl: function(url) { - return re.some((r) => r.test(url)); - } - }] + tests: [ + "https://v.qq.com/x/cover/mzc00200xxpsogl/j4101ouc4ve.html", + "https://v.qq.com/x/cover/qab156ofmrj45xy/r0025sd3txm.html", + "https://v.qq.com/x/page/h0305y9ksmw.html", + "https://v.qq.com/x/page/d3237p2gogi.html", + "https://v.qq.com/page/z/5/3/z01698x4h53.html", + "https://v.qq.com/page/o/p/p/o0196h1eppp.html", + "https://v.qq.com/boke/page/a/0/5/a031175aee5.html", + "http://v.qq.com/boke/page/f/3/p/f0188kmbq3p.html" + ] }; \ No newline at end of file From d29fb762d545807ef781d6c93bd917b52c60e9f0 Mon Sep 17 00:00:00 2001 From: Nazar Leush Date: Thu, 29 Jan 2026 15:03:30 +0200 Subject: [PATCH 2/3] Update audit.log --- audit.log | 32 +++++++++++++++++++++++++++++++- 1 file changed, 31 insertions(+), 1 deletion(-) diff --git a/audit.log b/audit.log index 5c418afc9..72c3ec67f 100644 --- a/audit.log +++ b/audit.log @@ -1 +1,31 @@ -No known vulnerabilities found +┌─────────────────────┬────────────────────────────────────────────────────────┐ +│ moderate │ Undici has an unbounded decompression chain in HTTP │ +│ │ responses on Node.js Fetch API via Content-Encoding │ +│ │ leads to resource exhaustion │ +├─────────────────────┼────────────────────────────────────────────────────────┤ +│ Package │ undici │ +├─────────────────────┼────────────────────────────────────────────────────────┤ +│ Vulnerable versions │ >=7.0.0 <7.18.2 │ +├─────────────────────┼────────────────────────────────────────────────────────┤ +│ Patched versions │ >=7.18.2 │ +├─────────────────────┼────────────────────────────────────────────────────────┤ +│ Paths │ .>cheerio>undici │ +├─────────────────────┼────────────────────────────────────────────────────────┤ +│ More info │ https://github.com/advisories/GHSA-g9mf-h72j-4rw9 │ +└─────────────────────┴────────────────────────────────────────────────────────┘ +┌─────────────────────┬────────────────────────────────────────────────────────┐ +│ low │ jsdiff has a Denial of Service vulnerability in │ +│ │ parsePatch and applyPatch │ +├─────────────────────┼────────────────────────────────────────────────────────┤ +│ Package │ diff │ +├─────────────────────┼────────────────────────────────────────────────────────┤ +│ Vulnerable versions │ >=6.0.0 <8.0.3 │ +├─────────────────────┼────────────────────────────────────────────────────────┤ +│ Patched versions │ >=8.0.3 │ +├─────────────────────┼────────────────────────────────────────────────────────┤ +│ Paths │ .>mocha>diff │ +├─────────────────────┼────────────────────────────────────────────────────────┤ +│ More info │ https://github.com/advisories/GHSA-73rr-hh4g-fpgx │ +└─────────────────────┴────────────────────────────────────────────────────────┘ +2 vulnerabilities found +Severity: 1 low | 1 moderate From 5e07de28607fc7ebec20c437b78b33edcf59ef38 Mon Sep 17 00:00:00 2001 From: Alexey Date: Thu, 29 Jan 2026 17:24:05 +0300 Subject: [PATCH 3/3] v.qq.com: revert $ in regexp --- plugins/domains/v.qq.com.js | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/plugins/domains/v.qq.com.js b/plugins/domains/v.qq.com.js index fc9b9e0a6..feb58e5ca 100644 --- a/plugins/domains/v.qq.com.js +++ b/plugins/domains/v.qq.com.js @@ -1,7 +1,7 @@ const re = [ - /^https?:\/\/v\.qq\.com\/page\/\w\/\w\/\w\/(\w+)\.html/i, - /^https?:\/\/v\.qq\.com\/\w+\/page\/(\w+)\.html/i, - /^https?:\/\/v\.qq\.com\/\w+\/\w\/\w+\.html\?vid=(\w+)/i, + /^https?:\/\/v\.qq\.com\/page\/\w\/\w\/\w\/(\w+)\.html$/i, + /^https?:\/\/v\.qq\.com\/\w+\/page\/(\w+)\.html$/i, + /^https?:\/\/v\.qq\.com\/\w+\/\w\/\w+\.html\?vid=(\w+)$/i, /^https?:\/\/v\.qq\.com\/iframe\/(?:player|preview)\.html\?vid=(\w+)/i, /^https?:\/\/v\.qq\.com\/\w\/cover\/\w+\/(\w+)\.html/i ];