v0.3.1 — Security Hardening

Security Fixes

CRITICAL

• Remove hardcoded Damai APP_KEY default (requires env var now)

HIGH

• URL-encode Bark notification messages to prevent injection
• Move ServerChan key from URL path to POST body
• Sanitize HTML/script tags from event data before JSON export

MEDIUM

• Add shell metacharacter validation + shell=false to subprocess
• Add explicit verify=True to all httpx clients

v0.3.0 — 统一抓取器架构

SubprocessScraper 基类、CIEFC worker 提取、猫眼字段补全、CI。

v0.1.1 — Security Audit Fixes

Security Fixes

• .gitignore: add .env to prevent credential leaks
• setup_cookies.py: remove auto pip install, cookies via stdin, chmod 600
• dedup.py: fix merge direction bug (high-confidence events discarded)
• damai.py: MD5 signing risk annotated, APP_KEY to env var
• store.py: IntegrityError handling + scraped_at type safety

Bug Fixes

• dedup: 3-day window, 4-char prefix match
• normalizer: empty ID UUID fallback, exception logging
• hardcoded year to datetime.now().year
• base.py: redirect false, jitter backoff
• utcnow to timezone.utc
• source_name merge dedup

ComiRadar v0.1.0

ComiRadar v0.1.0

Scrapes ticketing platforms and social media for anime cons, doujin fairs, and ACG concerts across China.

Features

• Multi-platform: Bilibili, Damai, ShowStart, Maoyan, Piaoxingqiu, Yongle, ChinaJoy, Ciefc, Nyato
• Social media: Weibo
• Event extraction with cross-source deduplication
• Fingerprint matching and fuzzy merge
• Notifications via ServerChan and Bark
• GitHub Actions automation + myBlog integration
• 46 unit tests covering config, normalizer, dedup, and DB