feat:图片加密忽略面板页面

scripts/generate-file-access-config.py

@@ -54,6 +54,7 @@ def main():
     policy = config.setdefault('file-access', {})
     defaults = {'mode': 'observe', 'block-browser-navigation': True, 'ttl-seconds': 1800,
                 'package-ttl-seconds': 86400, 'future-skew-seconds': 300,
+                'public-image-referer-prefixes': [],
                 'legacy-dart': {'enabled': True, 'extensions': ['jpg', 'jpeg', 'png', 'gif', 'webp', 'bmp', 'svg', 'ico']}}
     for name, value in defaults.items():
         policy.setdefault(name, value)

scripts/tests/test_generate_file_access_config.py

@@ -77,6 +77,7 @@ class SharedFileAccessConfigurationTest(unittest.TestCase):
         policy = json.loads((self.secret_dir / 'config.yml').read_text())['file-access']
         self.assertEqual(policy['mode'], 'observe')
         self.assertTrue(policy['block-browser-navigation'])
+        self.assertEqual(policy['public-image-referer-prefixes'], [])
         self.assertEqual(policy['upload']['ttl-seconds'], 300)
         self.assertEqual(policy['upload']['max-file-bytes'], 200 * 1024 * 1024)
         self.assertTrue({'jpg', 'pdf', 'apk', 'docx', 'xlsx', 'zip', 'mp4', 'txt'}.issubset(policy['upload']['allowed-extensions']))
@@ -87,11 +88,13 @@ class SharedFileAccessConfigurationTest(unittest.TestCase):
         registry = (self.secret_dir / 'keys.json').read_bytes()
         path = self.secret_dir / 'config.yml'
         config = json.loads(path.read_text())
+        config['file-access']['public-image-referer-prefixes'] = ['https://files.example/mobile/']
         config['file-access']['upload'] = {'ttl-seconds': 120, 'max-file-bytes': 1024,
                                           'allowed-extensions': ['png', 'pdf']}
         path.write_text(json.dumps(config))
         self.run_script()
         policy = json.loads(path.read_text())['file-access']['upload']
+        self.assertEqual(json.loads(path.read_text())['file-access']['public-image-referer-prefixes'], ['https://files.example/mobile/'])
         self.assertEqual(policy['ttl-seconds'], 120)
         self.assertEqual(policy['max-file-bytes'], 1024)
         self.assertEqual(policy['allowed-extensions'], ['png', 'pdf'])