Try our Chrome extension
Easily add the current web-page from your browser directly into your changedetection.io tool, more great features coming soon!
Chrome Webstore
Changedetection.io needs your support!
You can help us by supporting changedetection.io on these platforms;
- Rate us at AlternativeTo.net
- Star us on GitHub
- Follow us at Twitter/X
- G2 Software reviews
- Check us out on LinkedIn
- And tell your friends and colleagues :)
The more popular changedetection.io is, the more time we can dedicate to adding amazing features!
Many thanks :)
changedetection.io team
尚未 秒前
False
尚未 秒前
触发文本 忽略文本 阻止文本
8小时前
Skip to content
Navigation Menu
Sign in Appearance settings
* Platform
+ AI CODE CREATION
o GitHub Copilot Write better code with AI
o GitHub Copilot app Direct agents from issue to merge
o MCP Registry Integrate external tools
+ DEVELOPER WORKFLOWS
o Actions Automate any workflow
o Codespaces Instant dev environments
o Issues Plan and track work
o Code Review Manage code changes
o Code Quality Enforce quality at merge
+ APPLICATION SECURITY
o GitHub Advanced Security Find and fix vulnerabilities
o Code security Secure your code as you build
o Secret protection Stop leaks before they start
+ EXPLORE
o Why GitHub
o Documentation
o Blog
o Changelog
o Marketplace
View all features
* Solutions
+ BY COMPANY SIZE
o Enterprises
o Small and medium teams
o Startups
o Nonprofits
+ BY USE CASE
o App Modernization
o DevSecOps
o DevOps
o CI/CD
o View all use cases
+ BY INDUSTRY
o Healthcare
o Financial services
o Manufacturing
o Government
o View all industries
View all solutions
* Resources
+ EXPLORE BY TOPIC
o AI
o Software Development
o DevOps
o Security
o View all topics
+ EXPLORE BY TYPE
o Customer stories
o Events & webinars
o Ebooks & reports
o Business insights
o GitHub Skills
+ SUPPORT & SERVICES
o Documentation
o Customer support
o Community forum
o Trust center
o Partners
View all resources
* Open Source
+ COMMUNITY
o GitHub Sponsors Fund open source developers
+ PROGRAMS
o Security Lab
o Maintainer Community
o Accelerator
o GitHub Stars
o Archive Program
+ REPOSITORIES
o Topics
o Trending
o Collections
* Enterprise
+ ENTERPRISE SOLUTIONS
o Enterprise platform AI-powered developer platform
+ AVAILABLE ADD-ONS
o GitHub Advanced Security Enterprise-grade security features
o Copilot for Business Enterprise-grade AI features
o Premium Support Enterprise-grade 24/7 support
* Pricing
Type / to search
Sign in
Sign up Appearance settings
You signed in with another tab or window. Reload to refresh your session. You signed out in another tab or window. Reload to refresh your session. You switched accounts on another tab or window. Reload to refresh your session. Dismiss alert
Uh oh!
There was an error while loading. Please reload this page.
labstack / echo Public
* Uh oh!
There was an error while loading. Please reload this page.
* Notifications You must be signed in to change notification settings
* Fork 2.4k
* Star 32.6k
* Code
* Issues 6
* Pull requests 19
* Discussions
* Actions
* Projects
* Wiki
* Security and quality 2
* Insights
Additional navigation options
* Code
* Issues
* Pull requests
* Discussions
* Actions
* Projects
* Wiki
* Security and quality
* Insights
Releases: labstack/echo
Releases Tags
Releases · labstack/echo
Release list
* v5.3.1
* v5.3.0
* v5.2.1
* v4.15.4
* v5.2.0 - Static encoded-separator route bypass fix (GHSA-vfp3-v2gw-7wfq)
* v4.15.3 - Static encoded-separator route bypass fix (GHSA-vfp3-v2gw-7wfq)
* v5.1.1 - Context.Scheme() should validate header values
* v4.15.2 - Context.Scheme() header validation
* v5.1.0
* v4.15.1
Previous Next
Jump to release
* v5.3.1
* v5.3.0
* v5.2.1
* v4.15.4
* v5.2.0 - Static encoded-separator route bypass fix (GHSA-vfp3-v2gw-7wfq)
* v4.15.3 - Static encoded-separator route bypass fix (GHSA-vfp3-v2gw-7wfq)
* v5.1.1 - Context.Scheme() should validate header values
* v4.15.2 - Context.Scheme() header validation
* v5.1.0
* v4.15.1
Previous Next
v5.3.1
v5.3.1 Latest
Latest
Compare
Choose a tag to compare
Sorry, something went wrong.
Filter
Loading
Sorry, something went wrong.
Uh oh!
There was an error while loading. Please reload this page.
No results found
View all tags
aldas released this 21 Jul 16:10
Immutable release. Only release title and notes can be modified.
v5.3.1
ed8bbe4
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.
Fixes
* fix(static): preserve matched handler 404s by @JSap0914 in #3043
* fix(group): Implicitly registered group routes should be allowed overwritten in default routes by @aldas in #3049
Enhancements
* docs: update HTTP badge URLs to HTTPS by @KeloYuan in #2968
* docs: correct Any godoc to reflect true arbitrary-method matching by @hyorimitsu in #3046
* refactor: use range-over-integer loops by @zxysilent in #3042
* docs: add llms.txt and llms-full.txt for v5 documentation by @tamish560 in #3041
* Update deps to latest versions by @aldas in #3050
New Contributors
* @KeloYuan made their first contribution in #2968
* @hyorimitsu made their first contribution in #3046
* @JSap0914 made their first contribution in #3043
* @zxysilent made their first contribution in #3042
* @tamish560 made their first contribution in #3041
Full Changelog: v5.3.0...v5.3.1
Contributors
*
*
*
*
*
*
aldas, zxysilent, and 4 other contributors
Assets 3
Loading
Uh oh!
There was an error while loading. Please reload this page.
👍 2 liv-io and NetLancer reacted with thumbs up emoji
All reactions
* 👍 2 reactions
2 people reacted
v5.3.0
v5.3.0
Compare
Choose a tag to compare
Sorry, something went wrong.
Filter
Loading
Sorry, something went wrong.
Uh oh!
There was an error while loading. Please reload this page.
No results found
View all tags
aldas released this 12 Jul 19:58
Immutable release. Only release title and notes can be modified.
v5.3.0
caa0182
Group middleware logic changes
PR #2996 reverts back to v4 behavior for a group registering implicit 404 handlers.
If you do not want this behavior, you do not want implicit 404 handlers for groups, use:
e := echo.NewWithConfig(echo.Config{NoGroupAutoRegister404Routes: true})
g := e.Group("/api")
Other noteworthy echancements:
* Adds first-class support for the QUERY HTTP method RFC 10008 in #3038
e.QUERY("/", func(c *Context) error {
return c.String(http.StatusTeapot, "OK")
})
* Router: automatically handle HEAD request by GET handlers in https://github.com/labtack/echo/pull/2949
e := echo.NewWithConfig(echo.Config{
Router: echo.NewRouter(echo.RouterConfig{
AutoHandleHEAD: true,
}),
})
What's Changed
* perf(json): pooled-buffer JSON deserialize by @vishr in #3023
* perf(router): cache-friendly static child lookup by @vishr in #3024
* update golang.org/x deps to latest versions by @aldas in #3034
* pin GitHub Actions to full commit SHAs and rework actions SHAs to own variables by @aldas in #3035
* docs(csrf): fix godoc typo in Generator default (tp -> to) by @DucMinhNe in #3026
* docs(cors): note reverse-proxy header duplication by @vishr in #3027
* feat: add support for HTTP QUERY method by @thdxg in #3038
* docs: fix typos in API_CHANGES_V5.md by @maxtaran2010 in #3039
* Router: auto HEAD to GET by @aldas in #2949
* Revert back to v4 behavior for group registering implicit 404 handler… by @aldas in #2996
* Changelog for v5.3.0 by @aldas in #3040
New Contributors
* @DucMinhNe made their first contribution in #3026
* @thdxg made their first contribution in #3038
* @maxtaran2010 made their first contribution in #3039
Full Changelog: v5.2.1...v5.3.0
Contributors
*
*
*
*
*
vishr, aldas, and 3 other contributors
Assets 3
Loading
Uh oh!
There was an error while loading. Please reload this page.
👍 1 NetLancer reacted with thumbs up emoji 🎉 2 verybluebot and thdxg reacted with hooray emoji
All reactions
* 👍 1 reaction
* 🎉 2 reactions
3 people reacted
v5.2.1
v5.2.1
Compare
Choose a tag to compare
Sorry, something went wrong.
Filter
Loading
Sorry, something went wrong.
Uh oh!
There was an error while loading. Please reload this page.
No results found
View all tags
aldas released this 15 Jun 17:12
v5.2.1
78c3d95
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.
Security
Make serving static file releated methods and middleware not unescape path by default - so how the way Router interprets paths and Static methods/middleware is consistent.
Given following situation:
// 0.
// given folder structure:
// private.txt
// public/
// public/index.html
// public/text.txt
// public/admin/private.txt
// 1. share `public/` folder contents from the server root. This folder actually contains subfolder `admin` which
// contents we want to forbid from downloading
e.Static("/", "public")
// 2. naively assume that everything under /admin folder is now forbidden
e.GET("/admin/*", func(c *Context) error {
return ErrForbidden
})
Then requests to /admin%2fprivate.txt would not be matched to GET /admin/* route (routing does not look unescaped path) and static file serving will use unescaped path to serve the file.
Note: this way of "guarding" subfolders will never work for for paths like /assets/../admin%2fprivate.txt which will path.Clean("/assets/../admin%2fprivate.txt") to /admin/private.txt and are servable if static file serving is configured to unescape paths.
If you want to guard routes - use middlewares on Static* methods and before Static middleware.
* revert PR #3009 changes to just disabling path escaping by default in static methods/middleware by @aldas in #3016
Closes GHSA-vfp3-v2gw-7wfq more completely: the previous fix (#3009) rejected explicitly encoded
separators at the handler level; this patch makes the no-unescape behavior the default so new configurations are safe without extra opt-out steps.
What changed: DisablePathUnescaping (on StaticConfig and StaticDirectoryHandlerConfig) is deprecated and replaced by EnablePathUnescaping (default false). Path unescaping is now opt-in.
What this protects: With EnablePathUnescaping: false (new default), encoded separators (%2F, %5C) are never decoded before routing or file lookup, so they cannot
bypass route-level authentication or other middleware guards.
What this does NOT protect: Serving a directory with Static, StaticFS, or StaticDirectoryHandler exposes its entire subtree. Sibling routes are not a reliable
ACL boundary — attach authorization middleware directly to the static mount, or serve sensitive sub-trees under separate guarded routes.
Breaking change / migration: If you serve files whose names contain URL-encoded characters (e.g., /hello%20world.txt → hello world.txt), you must now opt in:
// Static middleware
e.Use(middleware.StaticWithConfig(middleware.StaticConfig{
EnablePathUnescaping: true, // only safe when NOT relying on route-based ACL guards
...
}))
// StaticDirectoryHandler
middleware.StaticDirectoryHandler(fs, &middleware.StaticDirectoryHandlerConfig{
EnablePathUnescaping: true,
})
Full Changelog: v5.2.0...v5.2.1
Contributors
*
aldas
Assets 2
Loading
Uh oh!
There was an error while loading. Please reload this page.
👍 2 NetLancer and liv-io reacted with thumbs up emoji
All reactions
* 👍 2 reactions
2 people reacted
v4.15.4
v4.15.4
Compare
Choose a tag to compare
Sorry, something went wrong.
Filter
Loading
Sorry, something went wrong.
Uh oh!
There was an error while loading. Please reload this page.
No results found
View all tags
aldas released this 15 Jun 18:28
v4.15.4
ec79b58
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.
Security
Fixes GHSA-vfp3-v2gw-7wfq: an encoded path separator (%2F or %5C) in a static file URL could bypass route-level middleware (e.g. authentication on a sibling route) and disclose static files. Both StaticDirectoryHandler (used by Static/StaticFS) and the Static middleware are affected. Backport of the v5 fix (#3016, released in v5.2.1). Thanks to @a-tt-om and @oran-gugu for reporting.
Make serving static file releated methods and middleware not unescape path by default - so how the way Router interprets paths and Static methods/middleware is consistent.
Given following situation:
// 0.
// given folder structure:
// private.txt
// public/
// public/index.html
// public/text.txt
// public/admin/private.txt
// 1. share `public/` folder contents from the server root. This folder actually contains subfolder `admin` which
// contents we want to forbid from downloading
e.Static("/", "public")
// 2. naively assume that everything under /admin folder is now forbidden
e.GET("/admin/*", func(c *Context) error {
return ErrForbidden
})
Then requests to /admin%2fprivate.txt would not be matched to GET /admin/* route (routing does not look unescaped path) and static file serving will use unescaped path to serve the file.
Note: this way of "guarding" subfolders will never work for for paths like /assets/../admin%2fprivate.txt which will path.Clean("/assets/../admin%2fprivate.txt") to /admin/private.txt and are servable if static file serving is configured to unescape paths.
If you want to guard routes - use middlewares on Static* methods and before Static middleware.
Breaking change / migration: If you serve files whose names contain URL-encoded characters (e.g., /hello%20world.txt → hello world.txt), you must now opt in:
e := echo.New()
e.EnablePathUnescapingStaticFiles = true // <-- enable old behavior
e.Static("/", "public")
for static middleware
e.Use(middleware.StaticWithConfig(middleware.StaticConfig{
EnablePathUnescaping: true, // <-- enable old behavior
}))
Full Changelog: v4.15.3...v4.15.4
Contributors
*
*
a-tt-om and oran-gugu
Assets 2
Loading
Uh oh!
There was an error while loading. Please reload this page.
👍 1 NetLancer reacted with thumbs up emoji
All reactions
* 👍 1 reaction
1 person reacted
v5.2.0 - Static encoded-separator route bypass fix (GHSA-vfp3-v2gw-7wfq)
v5.2.0 - Static encoded-separator route bypass fix (GHSA-vfp3-v2gw-7wfq)
Compare
Choose a tag to compare
Sorry, something went wrong.
Filter
Loading
Sorry, something went wrong.
Uh oh!
There was an error while loading. Please reload this page.
No results found
View all tags
vishr released this 14 Jun 14:17
v5.2.0
5786024
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.
Security
* fix(static): reject encoded path separators that bypass route-level middleware by @vishr in #3009
* fix(middleware/static): don't double-unescape request path (#2599) by @vishr in #3006
Fixes GHSA-vfp3-v2gw-7wfq: an encoded path separator (%2F or %5C) in a static file URL could bypass route-level middleware (e.g. authentication on a sibling route) and disclose static files. Both StaticDirectoryHandler/StaticFS and the Static middleware are affected. Thanks to @a-tt-om and @oran-gugu for reporting.
Enhancements
* feat(middleware): optional RateLimiterStoreContext for response headers (#2961) by @vishr in #3007
* perf: optimize core hot paths (chain, context, binding, responses) by @vishr in #3008
* fix(binder): include field name in bind conversion errors (#2629) by @vishr in #3005
* fix(binder): serialize BindingError to structured JSON (#2771) by @vishr in #3004
* fix(binder): MustUnixTime docs say time.Time, not time.Duration by @c-tonneslan in #2988
* fix(middleware): reset ContentLength after gzip decompression by @shblue21 in #3000
* fix(middleware/proxy): append RealIP to X-Forwarded-For for WebSocket requests by @kawaway in #2994
* Fix proxy panic when balancer has no targets by @shblue21 in #2977
* fix(middleware): correct documented KeyAuth KeyLookup default by @leestana01 in #2992
* test: lock in v5 group route method-handling (405 + OPTIONS) by @vishr in #3003
* docs: liveness signals in README + public ROADMAP by @vishr in #3002
* Fix typos in CSRFConfig comments by @shblue21 in #2979
* refactor: modernize code usage using gofix by @kumapower17 in #2970
* refactor: replace Split in loops with more efficient SplitSeq by @box4wangjing in #2969
* refactor: use the built-in max/min to simplify the code by @criciss in #2966
* Update GitHub actions deps versions by @aldas in #2971
New Contributors
* @criciss made their first contribution in #2966
* @box4wangjing made their first contribution in #2969
* @shblue21 made their first contribution in #2977
* @c-tonneslan made their first contribution in #2988
* @leestana01 made their first contribution in #2992
* @kawaway made their first contribution in #2994
Full Changelog: v5.1.1...v5.2.0
Contributors
*
*
*
*
*
*
*
*
*
*
*
vishr, kawaway, and 9 other contributors
Assets 2
Loading
Uh oh!
There was an error while loading. Please reload this page.
👍 2 gadam-j and NetLancer reacted with thumbs up emoji
All reactions
* 👍 2 reactions
2 people reacted
v4.15.3 - Static encoded-separator route bypass fix (GHSA-vfp3-v2gw-7wfq)
v4.15.3 - Static encoded-separator route bypass fix (GHSA-vfp3-v2gw-7wfq)
Compare
Choose a tag to compare
Sorry, something went wrong.
Filter
Loading
Sorry, something went wrong.
Uh oh!
There was an error while loading. Please reload this page.
No results found
View all tags
vishr released this 14 Jun 16:17
v4.15.3
8800212
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.
Security
* fix(static): reject encoded path separators that bypass route-level middleware by @vishr in #3011
Fixes GHSA-vfp3-v2gw-7wfq: an encoded path separator (%2F or %5C) in a static file URL could bypass route-level middleware (e.g. authentication on a sibling route) and disclose static files. Both StaticDirectoryHandler (used by Static/StaticFS) and the Static middleware are affected. Backport of the v5 fix (#3009, released in v5.2.0). Thanks to @a-tt-om and @oran-gugu for reporting.
Full Changelog: v4.15.2...v4.15.3
Contributors
*
*
*
vishr, a-tt-om, and oran-gugu
Assets 2
Loading
Uh oh!
There was an error while loading. Please reload this page.
👍 1 NetLancer reacted with thumbs up emoji
All reactions
* 👍 1 reaction
1 person reacted
v5.1.1 - Context.Scheme() should validate header values
v5.1.1 - Context.Scheme() should validate header values
Compare
Choose a tag to compare
Sorry, something went wrong.
Filter
Loading
Sorry, something went wrong.
Uh oh!
There was an error while loading. Please reload this page.
No results found
View all tags
aldas released this 01 May 19:17
v5.1.1
87a5c22
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.
Security
* Context.Scheme() should validate values taken from header by @aldas in #2953
Thanks to @shblue21 for reporting this issue - Context.Scheme accepts malformed forwarded scheme values used by host redirects.
Enhancements
* Add golangci linter configuration by @aldas in #2930
* Make StartConfig listener creation context-aware by @EricGusmao in #2936
* fix(lint): resolve staticcheck issues and improve code quality by @itsllyaz in #2941
* Context.Scheme should validate values taken from header by @aldas in #2953
* chore: fix typos in httperror.go by @tisonkun in #2958
* Context.Json should not unwrap response by @aldas in #2964
New Contributors
* @EricGusmao made their first contribution in #2936
* @itsllyaz made their first contribution in #2941
* @tisonkun made their first contribution in #2958
Full Changelog: v5.1.0...v5.1.1
Contributors
*
*
*
*
*
aldas, tisonkun, and 3 other contributors
Assets 2
Loading
Uh oh!
There was an error while loading. Please reload this page.
👍 2 liv-io and shblue21 reacted with thumbs up emoji ❤️ 1 levinit reacted with heart emoji
All reactions
* 👍 2 reactions
* ❤️ 1 reaction
3 people reacted
v4.15.2 - Context.Scheme() header validation
v4.15.2 - Context.Scheme() header validation
Compare
Choose a tag to compare
Sorry, something went wrong.
Filter
Loading
Sorry, something went wrong.
Uh oh!
There was an error while loading. Please reload this page.
No results found
View all tags
aldas released this 01 May 18:01
v4.15.2
25685e6
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.
Security
* Context.Scheme() should validate values taken from header by @aldas in #2962
Thanks to @shblue21 for reporting this issue.
Full Changelog: v4.15.1...v4.15.2
Contributors
*
*
aldas and shblue21
Assets 2
Loading
Uh oh!
There was an error while loading. Please reload this page.
All reactions
v5.1.0
v5.1.0
Compare
Choose a tag to compare
Sorry, something went wrong.
Filter
Loading
Sorry, something went wrong.
Uh oh!
There was an error while loading. Please reload this page.
No results found
View all tags
aldas released this 31 Mar 20:56
v5.1.0
597b4fa
Security
This change does not break the API contract, but it does introduce breaking changes in logic/behavior.
If your application is using c.RealIP() beware and read https://echo.labstack.com/docs/ip-address
In v5 the c.RealIP() will now return request.RemoteAddr unless e.IPExtractor has been configured. No potentially spoofable headers are used by default anymore.
Configure IPExtractor with proper trust options when you want to read IP from headers. See:
* https://pkg.go.dev/github.com/labstack/echo/v5#ExtractIPFromRealIPHeader
* https://pkg.go.dev/github.com/labstack/echo/v5#ExtractIPFromXFFHeader
v4 behavior can be restored with:
e := echo.New()
e.IPExtractor = echo.LegacyIPExtractor()
Related PR: Remove legacy IP extraction logic from context.RealIP method by @aldas in #2933
What's Changed
* Add echo-opentelemetry to the README.md by @aldas in #2908
* fix: correct spelling mistakes in comments and field name by @crawfordxx in #2916
* Add https://github.com/labstack/echo-prometheus to the middleware list in README.md by @aldas in #2919
* Add StartConfig.Listener so server with custom Listener is easier to create by @aldas in #2920
* Fix rate limiter documentation for default burst value by @karesansui-u in #2925
* Add doc comments to clarify usage of File related methods and leading slash handling by @aldas in #2928
* Add NewDefaultFS function to help create filesystem that allows absolute paths by @aldas in #2931
* Do not set http.Server.WriteTimeout in StartConfig by @aldas in #2932
* Remove legacy IP extraction logic from context.RealIP method by @aldas in #2933
New Contributors
* @crawfordxx made their first contribution in #2916
* @karesansui-u made their first contribution in #2925
Full Changelog: v5.0.4...v5.1.0
Contributors
*
*
*
aldas, crawfordxx, and karesansui-u
Assets 2
Loading
Uh oh!
There was an error while loading. Please reload this page.
🎉 2 NetLancer and ttokunaga-ja reacted with hooray emoji ❤️ 2 gomzyakov and fr13nd230 reacted with heart emoji 👀 1 liv-io reacted with eyes emoji
All reactions
* 🎉 2 reactions
* ❤️ 2 reactions
* 👀 1 reaction
5 people reacted
v4.15.1
v4.15.1
Compare
Choose a tag to compare
Sorry, something went wrong.
Filter
Loading
Sorry, something went wrong.
Uh oh!
There was an error while loading. Please reload this page.
No results found
View all tags
aldas released this 22 Feb 11:54
v4.15.1
6f3a84a
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.
What's Changed
* CSRF: support older token-based CSRF protection handler that want to render token into template by @aldas in #2905
Full Changelog: v4.15.0...v4.15.1
Contributors
*
aldas
Assets 2
Loading
Uh oh!
There was an error while loading. Please reload this page.
🎉 3 fr13nd230, NetLancer, and ljfreelancer88 reacted with hooray emoji
All reactions
* 🎉 3 reactions
3 people reacted
Previous 1 2 3 4 5 … 12 13 Next
Previous Next
Footer
© 2026 GitHub, Inc.
Footer navigation
* Terms
* Privacy
* Security
* Status
* Community
* Docs
* Contact
* Manage cookies
* Do not share my personal information
You can’t perform that action at this time.
目前差异仅按文本比较，非图形对比，只提供最新截图。
截图需要支持截图的内容抓取器（如 Sockpuppetbrowser、Selenium 等）。