跳转到内容
View in the app

A better way to browse. Learn more.
彼岸论坛

A full-screen app on your home screen with push notifications, badges and more.

To install this app on iOS and iPadOS
  1. Tap the Share icon in Safari
  2. Scroll the menu and tap Add to Home Screen.
  3. Tap Add in the top-right corner.
To install this app on Android
  1. Tap the 3-dot menu (⋮) in the top-right corner of the browser.
  2. Tap Add to Home screen or Install app.
  3. Confirm by tapping Install.
欢迎抵达彼岸 彼岸花开 此处谁在 -彼岸论坛

[分享发现] 部署 Alist 并且公网可以访问站点的建议检查下存储是否启用签名。

发表于
最近想着把自己网盘的文件直链分享给家人下载，就把 Alist 用 CloudFlareTunnel 搞了下内网穿透，然后发现不对劲，把直链 https://yuming.com/d/115/1.txt 后面的 1.txt 改成 2.txt 就可以直接下载网盘内存在的 2.txt ，同理可以遍历尝试下载其他文件。
搜了下发现添加存储库时"签名"选项没有默认启用，以至于有这种被扫绕过直接下载的风险，对我这种添加存储是网盘根目录，设置都是默认的小白有一定的风险，建议类似的朋友自查下存储库是否开启签名，或者直接全局选项签名所有


官方文档
https://alist.nn.ci/zh/config/global.html#%E7%AD%BE%E5%90%8D%E6%89%80%E6%9C%89
[img]Nb7Elht.png[/img]

issues
https://github.com/alist-org/alist/issues/5561

Featured Replies

No posts to show

创建帐户或登录来提出意见

https://www.cnbian.com/topic/5723/
前往主题列表

Configure browser push notifications
Chrome (Android)
  1. Tap the lock icon next to the address bar.
  2. Tap Permissions → Notifications.
  3. Adjust your preference.
Chrome (Desktop)
  1. Click the padlock icon in the address bar.
  2. Select Site settings.
  3. Find Notifications and adjust your preference.