hexo-theme-shokax 0.4.16 → 0.4.18

package/README.md

@@ -1,7 +1,4 @@
-# 📣 公告
-[你的 ShokaX 和 Shoka 站点可能正在遭遇供应链攻击](https://github.com/theme-shoka-x/hexo-theme-shokaX/discussions/293) \
-[关于 ShokaX 部署平台和 Astro 迁移的调查](https://github.com/theme-shoka-x/hexo-theme-shokaX/discussions/229)
-
+** [关于近期部分站点遭到全站复制的安全提示](https://github.com/theme-shoka-x/hexo-theme-shokaX/discussions/386) **
 # hexo-theme-shokaX
 ![LICENSE](	https://img.shields.io/github/license/theme-shoka-x/hexo-theme-shokaX)
 ![stars](https://img.shields.io/github/stars/theme-shoka-x/hexo-theme-shokaX)
@@ -9,16 +6,10 @@
 ![build](https://img.shields.io/github/actions/workflow/status/theme-shoka-x/hexo-theme-shokaX/build-theme.yml)
 
 #### 语言(language): 简体中文 | [English](./README_en.MD) \
-此项目是shoka的一个二次开发版(算精神续作),致力于提高性能和优化魔改体验 \
-诞生原因是目前shoka已经三年没有更新了,积压了大量BUG和功能请求。
+此项目是shoka的一个二次开发版(算精神续作),致力于提高性能和优化魔改体验 
 
 shokaX的社区资源导航和插件仓库为[awesome-shokaX](https://github.com/theme-shoka-x/awesome-shokaX)
 
-## 💬 和shoka的区别
-原先shoka使用了javascript+Native+nunjucks的技术 \
-而shokaX则使用了typescript+Vue 3+Pug的技术搭配 \
-更改了大量难以访问的CDN链接
-
 ## ✨ 功能清单 
 
 |   功能名称   | 实现状态 |     功能名称     | 实现状态 |
@@ -37,7 +28,7 @@ shokaX的社区资源导航和插件仓库为[awesome-shokaX](https://github.com
 
 ## 🔧 如何安装?
 注意: 本项目需要 node.js 18.x 或更高版本才能运行 \
-见文档中[如何安装](https://docs-hexo.shokax.top/getting-started/)部分
+见文档中[如何安装](https://hexo.docs.shokax.top/getting-started/)部分
 
 ## 📚子项目
 - [ShokaX docs](https://github.com/theme-shoka-x/shokaX-docs) ShokaX 主题文档 (正在编写中，欢迎加入！)

package/README_en.MD

@@ -1,7 +1,3 @@
-# 📣 Announcement
-[Your ShokaX and Shoka sites might be under a supply chain attack](https://github.com/theme-shoka-x/hexo-theme-shokaX/discussions/293) \
-[Survey on ShokaX deployment platform and Astro migration](https://github.com/theme-shoka-x/hexo-theme-shokaX/discussions/229)
-
 # hexo-theme-shokaX
 ![LICENSE](https://img.shields.io/github/license/theme-shoka-x/hexo-theme-shokaX)
 ![stars](https://img.shields.io/github/stars/theme-shoka-x/hexo-theme-shokaX)

package/_config.yml

@@ -34,6 +34,7 @@ experiments:
     enablePreload: true #是否开启预加载头图
     enableNextGradientCover: false # 使用CSS渐变作为上/下一页封面
   copyrightLength: 50 # 自定义复制时显示copyright的长度
+  antiFakeWebsite: true # 防止恶意网站伪装
 
 homeConfig:
   gradient: false # 使用CSS渐变作为文章封面

package/layout/_partials/layout.pug

@@ -18,9 +18,11 @@ html(lang=page.language?page.language:config.language, style=theme.grayMode ? 'f
         if enablePreload && enableCover
             if enableFixedCover
                 link(rel="preload" href=theme.homeConfig.fixedCover as="image" fetchpriority="high")
-            else
+            else if Array.isArray(covers)
                 each image in covers
-                    link(rel="preload" href=image as="image" fetchpriority="high")
+                    link(rel="preload" href!=image as="image" fetchpriority="high")
+            else
+                link(rel="preload" href!=covers as="image" fetchpriority="high")
 
         != partial('_partials/head/head_com.pug')
         != shokax_inject('head')
@@ -143,4 +145,3 @@ html(lang=page.language?page.language:config.language, style=theme.grayMode ? 'f
         != shokax_inject('bodyEnd')
 
 
-

package/package.json

@@ -1,6 +1,6 @@
 {
     "name": "hexo-theme-shokax",
-    "version": "0.4.16",
+    "version": "0.4.18",
     "description": "a hexo theme based on shoka",
     "main": "index.js",
     "repository": "https://github.com/theme-shoka-x/hexo-theme-shokaX",
@@ -29,12 +29,12 @@
     "dependencies": {
         "@algolia/client-search": "^5.5.3",
         "@waline/client": "^3.3.2",
-        "algoliasearch": "5.5.3",
+        "algoliasearch": "5.18.0",
         "esbuild": "^0.24.0",
         "hexo": "^7.3.0",
         "hexo-algoliasearch": "^2.0.1",
         "hexo-feed": "^1.1.2",
-        "hexo-fs": "^4.1.3",
+        "hexo-fs": "^5.0.0",
         "hexo-pagination": "^4.0.0",
         "hexo-renderer-pug": "^3.0.0",
         "hexo-util": "^3.3.0",
@@ -46,7 +46,7 @@
         "theme-shokax-anime": "^0.0.7",
         "theme-shokax-pjax": "^0.0.3",
         "twikoo": "^1.6.39",
-        "unlazy": "^0.11.3"
+        "unlazy": "^0.12.1"
     },
     "engines": {
         "node": ">=18.0.0"

package/scripts/generaters/script.js

@@ -137,6 +137,7 @@ hexo.extend.generator.register("script", function(locals) {
       __shokax_fancybox__: theme.modules.fancybox ? "true" : "false",
       __shokax_waline__: theme.waline.enable ? "true" : "false",
       __shokax_twikoo__: theme.twikoo.enable ? "true" : "false",
+      __shokax_antiFakeWebsite__: theme.experiments.antiFakeWebsite ? "true" : "false",
       shokax_CONFIG: JSON.stringify(siteConfig),
       shokax_siteURL: "'" + config.url + "'"
     }

package/scripts/plugin/index.js

@@ -42,8 +42,8 @@ hexo.on("generateBefore", () => {
   }
 });
 hexo.on("generateAfter", () => {
-  fetch("https://api.shokax.top/version/hexo", { headers: {
-    "User-Agent": "Mozilla/5.0 ShokaX Client (hexo-theme-shokax)"
+  fetch("https://registry.npmmirror.com/hexo-theme-shokax/latest", { headers: {
+    "User-Agent": "ShokaX Client (hexo-theme-shokax)"
   } }).then((res) => {
     res.json().then((resp) => {
       try {

package/source/js/_app/library/declare.d.ts

@@ -132,3 +132,4 @@ declare const __shokax_waline__:boolean
 declare const __shokax_twikoo__:boolean
 declare const shokax_CONFIG:configType
 declare const shokax_siteURL:string
+declare const __shokax_antiFakeWebsite__:boolean

package/source/js/_app/pjax/refresh.ts

@@ -34,6 +34,14 @@ export const pjaxReload = () => {
 }
 
 export const siteRefresh = async (reload) => {
+  if (__shokax_antiFakeWebsite__) {
+    if (window.location.origin !== CONFIG.hostname) {
+      window.location.href = CONFIG.hostname
+      /*! 我知道你正在试图去除这段代码，虽然我无法阻止你，但我劝你好自为之 */
+      alert('检测到非法仿冒网站，已自动跳转回正确首页;\nWe have detected a fake website, and you have been redirected to the correct homepage.')
+    }
+  }
+
   setLocalHash(0)
   setLocalUrl(window.location.href)
 

package/source/js/_app/pjax/siteInit.ts

@@ -99,6 +99,14 @@ const siteInit = async () => {
 
 cloudflareInit()
 
+if (__shokax_antiFakeWebsite__) {
+  if (window.location.origin !== CONFIG.hostname) {
+    window.location.href = CONFIG.hostname
+    /*! 我知道你正在试图去除这段代码，虽然我无法阻止你，但我劝你好自为之 */
+    alert('检测到非法仿冒网站，已自动跳转回正确首页;\nWe have detected a fake website, and you have been redirected to the correct homepage.')
+  }
+}
+
 window.addEventListener('DOMContentLoaded', siteInit, {
   passive: true
 })