[紧急特性急需应对]b站上线新特性，分享视频链接会暴露分享者身份 #3424
Replies: 11 comments 27 replies
-
|
注意一下图片打码？ |
Beta Was this translation helpful? Give feedback.
-
我这个链接点进去跟踪参数还是会自动刷新 |
Beta Was this translation helpful? Give feedback.
-
|
加个插件就行了 |
Beta Was this translation helpful? Give feedback.
-
|
thank you. |
Beta Was this translation helpful? Give feedback.
-
|
大佬，不会用啊 |
Beta Was this translation helpful? Give feedback.
-
|
个人测试该方法无效，bilibili-evolved版本 v2.2.1-preview 。时间6.20 |
Beta Was this translation helpful? Give feedback.
-
|
有效呀。 |
Beta Was this translation helpful? Give feedback.
-
|
我试着不管用啊 |
Beta Was this translation helpful? Give feedback.
-
|
这东西我昨天就发现了，点击推荐视频就能复现 |
Beta Was this translation helpful? Give feedback.
-
|
不过说实话，破站客户端分享复制出来的短链接跳转后带的信息更多，我看得懂的有所用客户端平台、时间戳。 |
Beta Was this translation helpful? Give feedback.
-
|
确实，所以我每次这种短链接都是用 https://b23.wtf 转换以后再访问或者分享，如果闲的话还会用脚本把 bv 号转成 av 号（ |
Beta Was this translation helpful? Give feedback.
-
没意义啊，短链接是给别人看的，真想追踪的，手动替换回 |
Beta Was this translation helpful? Give feedback.
-
你理解错了，我的意思是发送 b23.wtf 重定向之后的链接，当然不包括原始的短链接 |
Beta Was this translation helpful? Give feedback.
-
|
|
Beta Was this translation helpful? Give feedback.
-
|
知道了，安成插件了，安成组件就可以了 |
Beta Was this translation helpful? Give feedback.
-
|
请问图中的是什么扩展插件，脚本猫吗 |
Beta Was this translation helpful? Give feedback.
-
这就是本脚本的设置面板啊 |
Beta Was this translation helpful? Give feedback.
-
|
let c = document.URL.replace(window.location.search, ""); |
Beta Was this translation helpful? Give feedback.
-
|
因为这是js脚本加载导致的 |
Beta Was this translation helpful? Give feedback.
-
|
早就解决了 |
Beta Was this translation helpful? Give feedback.
-
|
https://greasyfork.org/scripts/393995 |
Beta Was this translation helpful? Give feedback.
-
|
早都解决了 |
Beta Was this translation helpful? Give feedback.
-
|
这个问题已经解决了吧？谁来 |
Beta Was this translation helpful? Give feedback.
-
|
这是功能建议，已经标记为已实现了 |
Beta Was this translation helpful? Give feedback.
-
|
贴下对应哪个功能、然后标记为答案，这样可能会更好，方便后来的用户快速知道功能已实现以及在哪启用。（比如7月就加了的功能，上面就有好几位到8月、9月了还以为没实现[doge] |
Beta Was this translation helpful? Give feedback.
-
|
只有提问类的可以标记答案... |
Beta Was this translation helpful? Give feedback.
-
|
打上标签其实就能知道做完没了。目前也一直有在这么做。 要知道对应哪个功能这个，确实不怎么方便找对应 commit，这和 GitHub Discussion 的机制有点关系。 GitHub Discussion 好像就是故意地不搞和 issue、PR、commit 之间的交叉引用互相显示 |
Beta Was this translation helpful? Give feedback.
-
|
经过测试，目前ClearURLs插件已经可以正确识别并处理掉vd_source参数 |
Beta Was this translation helpful? Give feedback.
-
这个功能是6月10日0点上线的。如图，注意网址部分（其他部分可以忽略）
当我们未登陆时，网址一切正常（图中情况是使用了“网址参数清理”这个组件）
但当我们已经登录b站时，再看视频网址就会自动加上一串参数
?vd_source=XXXXXXXXXXXXXXX，如图这个
vd_source参数经过测试，跟你的账号有关。极有可能就是你账号的uid的hash值。这直接导致分享视频链接会暴露分享者的账号。
下图是nga今晚0点50分刚发的新帖子。可以看到这位老哥已经中招了，他的b站账号被开盒就是时间问题。（不过好像这帖是他在分享自己的战绩……）
“网址参数清理”这个组件无法清理掉这串参数，甚至你手动删掉回车刷新也不行……它总是会自动刷新，给你加上这一串参数（只要你登录了b站）
这个恶心的新特性可以说不仅侵犯了用户隐私，而且也不利于收藏夹整理——它会导致浏览器不能分辨出已经收藏过的b站视频链接，从而容易重复收藏。
希望能出一个组件，不求能搞定这串参数，起码能在收藏b站视频时自动去掉一切参数，不至于污染收藏夹。
Beta Was this translation helpful? Give feedback.
All reactions