[紧急] Valine 评论系统信息泄露

由于 Valine 评论系统存在安全漏洞,本站已经临时关闭评论。(已恢复)

详见:发送请求中响应内容明文暴露评论者 IP、邮箱等隐私内容・Issue #336・xCss/Valine

Updated 2020-08-08

启用了 Gitalk 为新的评论系统,原有的访问量统计交由 LeanCloud Visitor 负责处理。
原有的评论无法导入到新评论系统,故贴在下方,需要者可自行查阅。(已经抹去敏感信息)
原评论者也可再次评论并告知我,好让我不用保持这么长的原有评论

原有评论

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
{
"results": [
{
"昵称": "易俶啊cyan",
"objectId": "5e8ddfa4158a7a0006bab8a3",
"ua": "Mozilla/5.0 (Linux; Android 9; vivo X21A Build/PKQ1.180819.001; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/66.0.3359.126 MQQBrowser/6.2 TBS/045132 Mobile Safari/537.36 V1_AND_SQ_8.3.0_1362_YYB_D QQ/8.3.0.4480 NetType/WIFI WebP/0.3.0 Pixel/1080 StatusBarHeight/85 SimpleUISwitch/0 QQTheme/2097",
"createdAt": "2020-04-08T14:28:52.985Z",
"link": "",
"comment": "<p>怎么搞😕</p>\n",
"url": "/article/friends/"
},
{
"昵称": "ljcbaby",
"objectId": "5e8de0655c3858000816815f",
"ua": "Mozilla/5.0 (Linux; Android 6.0; 1505-A01) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.116 Mobile Safari/537.36 EdgA/45.02.4.4931",
"createdAt": "2020-04-08T14:32:05.003Z",
"link": "https://www.ljcbaby.top",
"comment": "<p><a class=\"at\" href=\"#5e8ddfa4158a7a0006bab8a3\">@易俶啊cyan </a> , 呀!我忘了合作写作的那部分了,明天补上!</p>\n",
"url": "/article/friends/"
},
{
"昵称": "AkiPolaris",
"objectId": "5e8df5156b3a57000966244b",
"ua": "Mozilla/5.0 (Linux; Android 9; 16s Build/PKQ1.190202.001; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/70.0.3538.111 Mobile Safari/537.36",
"createdAt": "2020-04-08T16:00:21.860Z",
"link": "https://www.54df.cc",
"comment": "<p>求友链(<br>愤鸟杂记<br><a href=\"https://www.54df.cc\">https://www.54df.cc</a><br>slogan:某随机读写的记事本<br>(头像可以用gavatar)</p>\n",
"url": "/article/friends/"
},
{
"昵称": "Zxilly",
"objectId": "5e8df64a158a7a0006bade7f",
"ua": "Mozilla/5.0 (Linux; Android 9; LM-G710N Build/PKQ1.181105.001; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/66.0.3359.126 MQQBrowser/6.2 TBS/045132 Mobile Safari/537.36 V1_AND_SQ_8.3.0_1362_YYB_D QQ/8.3.0.4480 NetType/WIFI WebP/0.3.0 Pixel/1440 StatusBarHeight/94 SimpleUISwitch/1 QQTheme/2921",
"createdAt": "2020-04-08T16:05:30.975Z",
"link": "https://learningman.top",
"comment": "<p><a class=\"at\" href=\"#5e8df5156b3a57000966244b\">@AkiPolaris </a> , 我就是来围观的</p>\n",
"url": "/article/friends/"
},
{
"昵称": "Zxilly",
"objectId": "5e8df683158a7a0006badee2",
"ua": "Mozilla/5.0 (Linux; Android 9; LM-G710N Build/PKQ1.181105.001; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/66.0.3359.126 MQQBrowser/6.2 TBS/045132 Mobile Safari/537.36 V1_AND_SQ_8.3.0_1362_YYB_D QQ/8.3.0.4480 NetType/WIFI WebP/0.3.0 Pixel/1440 StatusBarHeight/94 SimpleUISwitch/1 QQTheme/2921",
"createdAt": "2020-04-08T16:06:27.817Z",
"link": "https://learningman.top",
"comment": "<p>不是很建议暴露自己用宝塔,宝塔的漏洞属实多</p>\n",
"url": "/article/Hexo/"
},
{
"昵称": "ljcbaby",
"objectId": "5e8df6e46b3a570009662ab2",
"ua": "Mozilla/5.0 (Linux; Android 6.0; 1505-A01) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.116 Mobile Safari/537.36 EdgA/45.02.4.4931",
"createdAt": "2020-04-08T16:08:04.373Z",
"link": "https://www.ljcbaby.top",
"comment": "<p><a class=\"at\" href=\"#5e8df683158a7a0006badee2\">@Zxilly </a> , 我倒不是很担心,反正用了一次混淆隐藏入口。<br>后面写文章的时候也会提到自己在用宝塔,早说晚说都一样。</p>\n",
"url": "/article/Hexo/"
},
{
"昵称": "Zxilly",
"objectId": "5f1d2965d1509d000859ba81",
"ua": "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.89 Safari/537.36 Edg/84.0.522.44",
"createdAt": "2020-07-26T06:57:41.613Z",
"link": "https://learningman.top",
"comment": "<p>我又想到一件事,你域名是备案了的吧,那么搭KMS可能会被微软寄律师函</p>\n",
"url": "/article/Hexo/"
},
{
"昵称": "ljcbaby",
"objectId": "5e8ffa44158a7a0006be2e55",
"ua": "Mozilla/5.0 (Windows NT 6.3; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.162 Safari/537.36 Edg/80.0.361.109",
"createdAt": "2020-04-10T04:47:00.168Z",
"link": "https://www.ljcbaby.top/",
"comment": "<p><a class=\"at\" href=\"#5e8df5156b3a57000966244b\">@AkiPolaris </a> , 加上了,另外提醒一下,评论系统里填写网址要加协议头的</p>\n",
"url": "/article/friends/"
},
{
"昵称": "ljcbaby",
"objectId": "5e91621338ed120008733885",
"ua": "Mozilla/5.0 (Linux; Android 6.0; 1505-A01) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.116 Mobile Safari/537.36 EdgA/45.02.4.4931",
"createdAt": "2020-04-11T06:22:11.098Z",
"link": "https://www.ljcbaby.top",
"comment": "<p><a class=\"at\" href=\"#5e8ddfa4158a7a0006bab8a3\">@易俶啊cyan </a> , 已经补上</p>\n",
"url": "/article/friends/"
},
{
"昵称": "ljcbaby",
"objectId": "5e92bacb6b3a5700096e43dd",
"ua": "Mozilla/5.0 (Linux; Android 6.0; 1505-A01) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.116 Mobile Safari/537.36 EdgA/45.02.4.4931",
"createdAt": "2020-04-12T06:52:59.985Z",
"link": "https://www.ljcbaby.top",
"comment": "<p><a class=\"at\" href=\"#5e92b933158a7a0006c2f9a5\">@Zxilly </a> , emmm我自己手机上体验还好。有空我补个选择性加载吧。</p>\n",
"url": "/article/Hexo/"
},
{
"昵称": "Zxilly",
"objectId": "5e92b933158a7a0006c2f9a5",
"ua": "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.163 Safari/537.36 Edg/80.0.361.111",
"createdAt": "2020-04-12T06:46:11.613Z",
"link": "https://learningman.top",
"comment": "<p>点击动画建议移除,这玩意儿在移动端性能爆炸</p>\n",
"url": "/article/Hexo/"
},
{
"昵称": "Anonymous",
"objectId": "5f1937a08c2d2a00062c4ab1",
"ua": "Mozilla/5.0 (Linux; Android 6.0.1; OPPO R9s Build/MMB29M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/77.0.3865.120 MQQBrowser/6.2 TBS/045230 Mobile Safari/537.36 V1_AND_SQ_8.3.5_1392_YYB_D QQ/8.3.5.4555 NetType/WIFI WebP/0.3.0 Pixel/1080 StatusBarHeight/54 SimpleUISwitch/0 QQTheme/3256",
"createdAt": "2020-07-23T07:09:20.830Z",
"link": "",
"comment": "<p>专家盲点的意思是那些大佬出的教程一般都“以己度人”的意思吗? <img alt=\"grievance\" referrerPolicy=\"no-referrer\" class=\"vemoji\" src=\"//img.t.sinajs.cn/t4/appstyle/expression/ext/normal/a5/2018new_weiqu_thumb.png\" /></p>\n",
"url": "/article/technical-document-reading-suggestions/"
},
{
"昵称": "Anonymous",
"objectId": "5f193b0d8c2d2a00062c532c",
"ua": "Mozilla/5.0 (Linux; Android 6.0.1; OPPO R9s Build/MMB29M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/77.0.3865.120 MQQBrowser/6.2 TBS/045230 Mobile Safari/537.36 V1_AND_SQ_8.3.5_1392_YYB_D QQ/8.3.5.4555 NetType/WIFI WebP/0.3.0 Pixel/1080 StatusBarHeight/54 SimpleUISwitch/0 QQTheme/3256",
"createdAt": "2020-07-23T07:23:57.864Z",
"link": "",
"comment": "<p>墙是挡不住那些真正想了解外界的人的,每代人有每个时代的生态,对于95后,00后10后这些群体,很多人对于墙的存在没有多大实感,翻墙很多时候只是他们拓宽眼界的一条路而已,(还包括追求刺激和所谓的自由),在我看来墙更像是一张年龄与能力的过滤网,能者自然对得,所以不必用逝去的美好来祭奠现在的时光,一切都是时间与时代的选择 <img alt=\"bad laugh\" referrerPolicy=\"no-referrer\" class=\"vemoji\" src=\"//img.t.sinajs.cn/t4/appstyle/expression/ext/normal/4d/2018new_huaixiao_org.png\" /></p>\n",
"url": "/article/never-existed/"
},
{
"昵称": "ljcbaby",
"objectId": "5f1996702f580d0008fe1511",
"ua": "Mozilla/5.0 (Windows NT 6.3; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.89 Safari/537.36 Edg/84.0.522.40",
"createdAt": "2020-07-23T13:53:52.503Z",
"link": "https://www.ljcbaby.top/",
"comment": "<p><a class=\"at\" href=\"#5f1937a08c2d2a00062c4ab1\">@Anonymous </a> , 并不是“以己度人”,而是会存在想不到一些简单的情况会有人不知道。<br>就像学了数学,谁会想到到还有人不知道<code>1+1=2</code>呢?</p>\n",
"url": "/article/technical-document-reading-suggestions/"
},
{
"昵称": "ljcbaby",
"objectId": "5f1c275a603c280009406cf7",
"ua": "Mozilla/5.0 (Windows NT 6.3; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.89 Safari/537.36 Edg/84.0.522.40",
"createdAt": "2020-07-25T12:36:42.817Z",
"link": "https://www.ljcbaby.top/",
"comment": "<p><a class=\"at\" href=\"#5f193b0d8c2d2a00062c532c\">@Anonymous </a> , 看人的吧,毕竟对于技术党来说墙对Github的干扰就已经很难受了,更别说还有一些技术网站就直接404了。<br>Facebook, YouTube, Twitter的确是成了反华的大本营了,但我来说基本上都是不去的,眼不见为净。</p>\n",
"url": "/article/never-existed/"
},
{
"昵称": "ljcbaby",
"objectId": "5f1c60cc43df3600086cdf21",
"ua": "Mozilla/5.0 (Windows NT 6.3; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.89 Safari/537.36 Edg/84.0.522.40",
"createdAt": "2020-07-25T16:41:48.224Z",
"link": "https://www.ljcbaby.top/",
"comment": "<p><a class=\"at\" href=\"#5e92b933158a7a0006c2f9a5\">@Zxilly </a> , 结果现在因为嫌难看,整个动画被我干没了。</p>\n",
"url": "/article/Hexo/"
},
{
"昵称": "ljcbaby",
"objectId": "5f1d2a9fd1509d000859bece",
"ua": "Mozilla/5.0 (Windows NT 6.3; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.89 Safari/537.36 Edg/84.0.522.40",
"createdAt": "2020-07-26T07:02:55.825Z",
"link": "https://www.ljcbaby.top/",
"comment": "<p><a class=\"at\" href=\"#5f1d2965d1509d000859ba81\">@Zxilly </a> , 的确可能,不过也不是我搭建的,我只是CNAME了有效的上游。</p>\n",
"url": "/article/Hexo/"
},
{
"昵称": "Ākura",
"objectId": "5f28e9e61c2c2b0008b80261",
"ua": "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 Edg/84.0.522.52",
"createdAt": "2020-08-04T04:53:58.004Z",
"link": "https://404gle.cn/",
"comment": "<p> <img alt=\"doge\" referrerPolicy=\"no-referrer\" class=\"vemoji\" src=\"//img.t.sinajs.cn/t4/appstyle/expression/ext/normal/a1/2018new_doge02_org.png\" /></p>\n",
"url": "/article/the-silent-city/"
},
{
"昵称": "ljcbaby",
"objectId": "5f28ebfc1c2c2b0008b806b4",
"ua": "Mozilla/5.0 (Windows NT 6.3; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 Edg/84.0.522.52",
"createdAt": "2020-08-04T05:02:52.551Z",
"link": "https://www.ljcbaby.top/",
"comment": "<p><a class=\"at\" href=\"#5f28e9e61c2c2b0008b80261\">@Ākura </a> , 确实是看了你博客之后转的<br>主要是害怕这种情况的出现 <img alt=\"dog\" referrerPolicy=\"no-referrer\" class=\"vemoji\" src=\"//img.t.sinajs.cn/t4/appstyle/expression/ext/normal/22/2018new_erha_org.png\" /></p>\n<p>看完之后有不少感想</p>\n",
"url": "/article/the-silent-city/"
}
]
}

二维码

打赏