Wechat Native Publisher
把定稿的纯文本/md/已排版HTML，一键渲染成微信原生富文本并推送到公众号草稿箱。支持自动排版和HTML直输两种模式，含主题换肤、排版偏好向导、封面自动生成、发布前自检。
as observed 2026-09-09T11:17:27.097Z- Identifier
wechat-native-publisher- Source
- ClawHub
- Version observed
- 1.0.5
- Source repository
- not published
- Repository observation
- No source repository listed
- First observed here
- 2026-09-08T10:18:19.235Z
- Observations recorded
- 2
- Installs (reported upstream)
- 1
- Weekly downloads (upstream)
- 111
Observation history
2026-09-09T11:17:27.097Z
Fields that differed: changelog latestVersion
| Field | Before | After |
|---|---|---|
changelog |
"**v1.2.5 安全修复与增强：**\n\n- 发布流水线(push_draft.py)加入与预览流水线(make_preview.py)一致的HTML消毒，防止危险标签流入生产环境。\n- 自动或预览生成临时文件时全部改为不可预测的系统临时文件名，防止符号链接攻击。\n- 严格禁用requests代理，阻断SSRF通过系统http_proxy等方式绕过 | "**重大安全修复：通过 ClawHub 审计，消除 3 项安全告警，进一步提升排版/消毒/图片安全边界**\n\n- 全面收敛HTML转义边界，renderer组件内部自动转义标题和签名，防止XSS，无重复转义。\n- 强化HTML消毒，所有URL属性严格校验scheme，仅允许http/https（img支持data:image），杜绝编码绕过和危险sc |
latestVersion |
"1.0.4" | "1.0.5" |
Correction
If you maintain this extension and believe anything above is inaccurate, request a correction. Corrections are published, and disputed entries are marked as disputed while under review.