other
Error
- Location
scripts/md2article_html.py:914- Finding
Unrequested promotional content is appended to generated articles
- Content
View full analysis
{line}' for line in lines ) return ( f'' f'{lines_html}' f' ' ) ``` ```python footer_section = render_footer(s) ending_section = render_ending(s) ``` ```python "ending_lines": [ "—End—", "如果觉得不错 随手点个 赞、在看、转发 三连吧", "关注+星标 可第一时间收到更多精彩思考和总结", "您的支持是我继续写下去的动力", "注：原创不易，合作请在公众号后台留言，未经许可，不得随意修改及盗用原文。", ], ``` ### Technical Analysis Article mode is the Skill's documented default. Its built-in default configuration contains engagement, follow, redistribution, and copyright messages that are not derived from the user's Markdown. During normal rendering, `render_ending()` reads these default lines and inserts them into the output. The final article assembly calls this function without requiring explicit user consent. Consequently, a routine Markdown conversion can produce content beyond what the user authored or requested. The configured lines are also inserted as raw HTML rather than escaped text. Although the built-in strings are static, a custom configuration can place arbitrary HTML markup in this section. This increases output-integrity risk if configuration files are obtain ...[truncated 1207 chars]- Remediation
View remediation