plugin-comment-widget icon indicating copy to clipboard operation
plugin-comment-widget copied to clipboard

希望可以增加设置完全禁用评论中填写网站地址

Open VoidYun opened this issue 1 year ago • 0 comments

What would you like to be added?

希望可以增加设置来完全禁用网站地址 Image

Why is this needed?

并不是所有网站都需要这个功能,且存在掉备案和被请喝茶的风险:用户可以填写恶意地址,然而前端可以通过点击昵称直接跳转到该地址

Anything else we need to know?

另外本以为设置为仅限注册用户评论可以避免这个问题,但是发现仅仅只是前端没有填写网站地址的地方,实际可以补全请求体 owner 的信息后增加 website

{
    "raw": "test",
    "content": "test",
    "allowNotification": true,
    "owner": {
        "kind": "User",
        "name": "testuser",
        "displayName": "testuser",
        "website": "https://www.bilibili.com"
    },
    "subjectRef": {
        "group": "plugin.halo.run",
        "kind": "Plugin",
        "name": "PluginLinks",
        "version": "v1alpha1"
    }
}

VoidYun avatar Jan 03 '25 08:01 VoidYun