换成单集群模式

EdgeDNS/internal/nodes/dns_node.go

@@ -31,6 +31,7 @@ import (
 	"os"
 	"os/exec"
 	"os/signal"
+	"regexp"
 	"runtime"
 	"runtime/debug"
 	"syscall"
@@ -328,6 +329,13 @@ func (this *DNSNode) start() {
 		apiConfig.NumberId = config.Id
 	}
 
+	// 验证 NodeId 防止路径遍历
+	var nodeIdRegexp = regexp.MustCompile(`^[a-zA-Z0-9_\-]+$`)
+	if !nodeIdRegexp.MatchString(config.NodeId) {
+		remotelogs.Error("NODE", "invalid NodeId: contains illegal characters")
+		return
+	}
+
 	var db = dbs.NewDB(Tea.Root + "/data/data-" + types.String(config.Id) + "-" + config.NodeId + "-v0.1.0.db")
 	err = db.Init()
 	if err != nil {