` \r\n\r\n发现在文章页面生效了,但是在编辑界面,这行标签并不会被注入\n\n### 相关日志输出\n\n_No response_\n\n### 附加信息\n\n \r\n\r\n",[2925],{"name":2926,"color":2896},"triage/needs-information",5013,"全局代码注入不生效","2023-12-08T06:29:20Z","https://github.com/halo-dev/halo/issues/5013",0.7239081,{"description":2933,"labels":2934,"number":2941,"owner":2872,"repository":2873,"state":2898,"title":2942,"updated_at":2943,"url":2944,"score":2945},"### 系统信息\n\n- 外部访问地址: https://backup.laoda.de\r\n- 启动时间: 2024-02-22 09:22\r\n- 版本: 2.12.2\r\n- 构建时间: 2024-02-05 15:14\r\n- Git Commit: 46efa87\r\n- Java: IBM Semeru Runtime Open Edition / 17.0.9+9\r\n- 数据库: MySQL Community Server - GPL / 8.1.0\r\n- 操作系统: Linux / 6.1.0-18-amd64\r\n- 已激活主题: [Theme Joe3](https://github.com/jiewenhuang/halo-theme-joe3.0)\r\n- 已启动插件:\r\n - [朋友圈](https://github.com/chengzhongxue/plugin-friends)\r\n - [链接管理](https://github.com/halo-sigs/plugin-links)\r\n - [瞬间](https://github.com/halo-sigs/plugin-moments)\r\n - [lightgallery.js 灯箱](https://github.com/halo-sigs/plugin-lightgallery)\r\n - [ByteMD](https://github.com/ruibaby/plugin-bytemd)\r\n - [通知我](https://github.com/monyuan/notify-me)\r\n - [Sitemap](https://github.com/halo-dev/plugin-sitemap)\r\n - [搜索组件](https://github.com/halo-dev/plugin-search-widget)\r\n - [RSS](https://github.com/halo-dev/plugin-feed)\r\n - [评论组件](https://github.com/halo-dev/plugin-comment-widget)\r\n - [应用市场](https://github.com/halo-dev/plugin-app-store)\n\n### 使用的哪种方式运行?\n\nDocker\n\n### 在线站点地址\n\n_No response_\n\n### 发生了什么?\n\n我发布了一篇markdown写的文章,发布的时候没有填发布时间,默认按照当前时间发布了,但是这篇文章其实是我在2022年写的, 现在我重新编辑,发现直接在发布时间那边打`2022`无法显示,效果如下:\r\n\r\n\r\n\r\n如果是正常编辑的时候填写发布时间,输入`2022`的话,是正常的。\r\n\r\n\r\n\r\n\n\n### 相关日志输出\n\n_No response_\n\n### 附加信息\n\n_No response_",[2935,2938],{"name":2936,"color":2937},"kind/bug","e11d21",{"name":2939,"color":2940},"area/ui","1d76db",5389,"发布之后的文章如果想要再次修改发布时间的BUG","2024-03-14T08:36:01Z","https://github.com/halo-dev/halo/issues/5389",0.7282076,{"description":2947,"labels":2948,"number":2955,"owner":2872,"repository":2873,"state":2898,"title":2956,"updated_at":2957,"url":2958,"score":2959},"### 你当前使用的版本\n\n2.11.0\n\n### 描述一下此特性\n\n我想在插件中实现服务端向前端推送消息,目前想到比较好的方案为 websocket,但插件好像不支持开发 websocket 接口。\r\n场景:在插件中想要执行一些 shell 脚本,并且将 shell 脚本的输出实时的推送给前端。\r\nshell 脚本会在 halo 容器中下载一些东西,前端可以同步下载进度和 shell 脚本的输出。\r\n\r\n感觉轮询比较耗费性能,websocket 可能是个更好的选择,希望 halo 支持插件 websocket。\r\n或者你们是否有更好的方案?\n\n### 附加信息\n\n_No response_",[2949,2950,2952],{"name":2866,"color":2867},{"name":2951,"color":2870},"area/core",{"name":2953,"color":2954},"area/plugin","181D31",5285,"期待插件支持 websocket 接口","2024-04-25T13:26:29Z","https://github.com/halo-dev/halo/issues/5285",0.7305061,{"description":2961,"labels":2962,"number":2968,"owner":2872,"repository":2873,"state":2898,"title":2969,"updated_at":2970,"url":2971,"score":2972},"### 系统信息\r\n\r\n- 外部访问地址: http://localhost:8090/\r\n- 启动时间: 2024-03-13 13:29\r\n- 版本: 2.14.0-SNAPSHOT\r\n- 构建时间: 2024-03-13 13:29\r\n- Git Commit: 956f4ef\r\n- Java: Java(TM) SE Runtime Environment / 17.0.10+11-LTS-240\r\n- 数据库: H2 / 2.2.224\r\n- 操作系统: Mac OS X / 14.3.1\r\n- 已激活主题: [Earth](https://github.com/halo-dev/theme-earth.git)\r\n- 已启动插件:\r\n - [瞬间](https://github.com/halo-sigs/plugin-moments)\r\n - [Sitemap](https://github.com/halo-dev/plugin-sitemap)\r\n - [搜索组件](https://github.com/halo-dev/plugin-search-widget)\r\n - [RSS](https://github.com/halo-dev/plugin-feed)\r\n - [评论组件](https://github.com/halo-dev/plugin-comment-widget)\r\n - [应用市场](https://github.com/halo-dev/plugin-app-store)\r\n\r\n### 使用的哪种方式运行?\r\n\r\nSource Code\r\n\r\n### 发生了什么?\r\n\r\n登陆之后,在安装插件的时候,上传恶意构造的 jar 包可以 rce\r\n\r\n\r\n\r\n示例 jar 包 [telllplugin.jar](https://pic.l1nyz-tel.cc/202403131510404.jar)\r\n\r\n\r\n\r\n### 相关日志输出\r\n\r\n_No response_\r\n\r\n### 附加信息\r\n\r\nvideo 链接: [attack.mov](https://pic.l1nyz-tel.cc/202403131519955.mov)",[2963,2966,2967],{"name":2964,"color":2965},"priority/awaiting-more-evidence","fef2c0",{"name":2926,"color":2896},{"name":2953,"color":2954},5502,"Plugin Install Remote Code Execution","2024-09-12T08:50:39Z","https://github.com/halo-dev/halo/issues/5502",0.73518723,{"description":2974,"labels":2975,"number":2977,"owner":2872,"repository":2873,"state":2898,"title":2978,"updated_at":2979,"url":2980,"score":2981},"### System information\n\n2023年10月左右通过dokcer安装halo\r\n是此命令安装的\r\ndocker run -it -d --name halo -p 8090:8090 -v ~/.halo2:/root/.halo2 halohub/halo:2.11\n\n### What is the project operation method?\n\nDocker\n\n### Your site address.\n\n_No response_\n\n### What happened?\n\n1. 日志巨大,今天发现服务器磁盘可用空间为0,发现18G的docker容器日志,是halo的\r\n[23f4a2029afb31efbd527b1266d75a07ba5703cef720ef5f57ae39f6463d5704.log](https://github.com/halo-dev/halo/files/13704045/23f4a2029afb31efbd527b1266d75a07ba5703cef720ef5f57ae39f6463d5704.log)\r\n\r\n\r\n\r\n\r\n2. 日志发现大量异常报错,查看了4,5000行,基本都是报错,我吧最后1000行日志保留下来了\r\n3. 刷新搜索引擎异常\r\n4. 个别文章显示505异常,数据库没有该文章\n\n### Relevant log output\n\n_No response_\n\n### Additional information\n\n\r\n下面是我点击刷新搜索引擎时,最后1000日志\r\n[a.log](https://github.com/halo-dev/halo/files/13704142/a.log)\r\n\r\n\r\n",[2976],{"name":2895,"color":2896},5067,"日志巨量增长和reactor.core.Exceptions异常","2024-01-21T04:11:03Z","https://github.com/halo-dev/halo/issues/5067",0.73824155,["Reactive",2983],{},["Set"],["ShallowReactive",2986],{"$fTRc1wZytZ_XrK4EfJfei_Sz-An4H4Yy6syhVxH_PVJc":-1,"$frVZagU3OOPpJxmH4Sdco7WwDIuCu9Fah8Vum3ZTEvR4":-1},"/halo-dev/halo/5513"]