mirror of
https://github.com/joeseesun/wechat-radar.git
synced 2026-09-11 04:48:29 +09:00
Document WeChat account safety guidance
This commit is contained in:
@@ -8,6 +8,13 @@ Please open a GitHub security advisory or a private issue if you find a vulnerab
|
||||
|
||||
The most sensitive asset is your local SQLite database. Keep it outside synced folders and do not publish it. The default path is `~/.wechat-radar/radar.db`.
|
||||
|
||||
## WeChat usage boundary
|
||||
|
||||
- 建议使用注册半年以上的小号或测试号,不建议直接使用主力微信号。
|
||||
- 当前只建议读取历史聊天记录。
|
||||
- 不建议读取朋友圈,也不要自动点赞、评论、发消息、加好友、改资料或做任何写入/社交操作。
|
||||
- 已测试通过的微信版本是 `4.1.9.58`;不建议在更高版本上贸然测试。
|
||||
|
||||
## Command execution
|
||||
|
||||
The app invokes `wx` via `child_process.execFile` with argument arrays. Avoid changing this to shell string execution.
|
||||
|
||||
Reference in New Issue
Block a user