
Security News
Nx npm Packages Compromised in Supply Chain Attack Weaponizing AI CLI Tools
Malicious Nx npm versions stole secrets and wallet info using AI CLI tools; Socket’s AI scanner detected the supply chain attack and flagged the malware.
picgo-plugin-bilibili
Advanced tools
为 PicGo 开发的一款插件,新增了B站图床 图床。
使用用户动态的图片上传API。填写SESSDATA和bli_jct
即可,获取方式在下面。
在线安装
打开 PicGo 详细窗口,选择插件设置,搜索bili安装,然后重启应用即可。
离线安装
克隆该项目,复制项目到 以下目录:
%APPDATA%\picgo\
$XDG_CONFIG_HOME/picgo/
or ~/.config/picgo/
~/Library/Application\ Support/picgo/
切换到新目录执行 npm install ./picgo-plugin-bilibili
,然后重启应用即可。
F12
打开控制台SESSDATA
还有bli_jct
复制即可例如原图: https://i0.hdslb.com/bfs/album/a18a3f8d666dc19c3216bef39a092e0e60c90eb4.png
规定高宽,质量压缩: https://i0.hdslb.com/bfs/album/a18a3f8d666dc19c3216bef39a092e0e60c90eb4.png@14w_14h_1e_1c
Type | Url |
---|---|
原图 | baseURL/1.jpg |
原分辨率,质量压缩 | baseURL/1.jpg@1e_1c.jpg |
规定宽,高度自适应,质量压缩 | baseURL/1.jpg@104w_1e_1c.jpg |
规定高,宽度自适应,质量压缩 | baseURL/1.jpg@104h_1e_1c.jpg |
规定高宽,质量压缩 | baseURL/1.jpg@104w_104h_1e_1c.jpg |
原分辨率,webp格式(占用最小) | baseURL/1.jpg@104w_104h_1e_1c.webp |
规定高度,webp格式(占用最小) | baseURL/1.jpg@104w_104h_1e_1c.webp |
格式:(图像原链接)@(\d+[whsepqoc]_?)*(.(|webp|gif|png|jpg|jpeg))?$
B站开启了防盗链,利用的是HTTP的Referer属性做判断。如果Referer是他白名单之外的网站,就会返回403
在html的head标签中设置如下标志,那么全站资源引用都不会携带referrer
<meta name="referrer" content="no-referrer">
主要设置rel="noreferrer"
,使用window.open
打开的话是会默认携带referrer
的,第一次还是会403
<a rel="noreferrer" target="_blank"></a>
FAQs
bilibili 图床
The npm package picgo-plugin-bilibili receives a total of 12 weekly downloads. As such, picgo-plugin-bilibili popularity was classified as not popular.
We found that picgo-plugin-bilibili demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
Malicious Nx npm versions stole secrets and wallet info using AI CLI tools; Socket’s AI scanner detected the supply chain attack and flagged the malware.
Security News
CISA’s 2025 draft SBOM guidance adds new fields like hashes, licenses, and tool metadata to make software inventories more actionable.
Security News
A clarification on our recent research investigating 60 malicious Ruby gems.