跳至主要内容

博客

Image Support & Security Hardening

2025.09.08
发布 2025.09.20
更新日志Image SupportSecurity

Introduced image event support, significant memory optimizations, and comprehensive plugin security enhancements.

Key Updates

  1. Events can now display images. RSS plugins automatically extract relevant images with optimized loading via dual-layer caching strategy.

  2. Added an option to disable image display to save memory and improve performance.

  3. Significantly reduced memory usage by optimizing view lifecycle management and fixing memory leaks.

Other Updates

  1. Enhanced plugin security with detailed permission display and explicit network/storage access declarations.

  2. Optimized storage with 16KB limit per plugin, maximum 5 cache entries, and 5-minute to 24-hour cache duration.

  3. Improved JavaScript security by removing unsafe features like eval and Function, and enhanced URL validation to prevent SSRF attacks.