Unverified50% confidenceFactExact time
3.1.0版本修复了#expr解析器的任意代码执行漏洞，改用白名单式表达式解析器只允许预定义的数学运算符和函数
1
Sources
50%
Confidence
Medium-term (~90 days)
Relevance
8/12/2026
First Seen
Valid until: 11/10/2026
Sources
Related Claims
UnverifiedThe string array obfuscation of obfuscator.io extracts all string literals into a top-level array and restores them at runtime through a decryption function with an offset.60% similarUnverifiedOB混淆会对变量名和函数名做无意义替换，并插入控制流平坦化逻辑将线性代码打散成状态机结构58% similarUnverifiedWASM 利用编译隔离，将加密逻辑用 C/C++/Rust 编写后编译为 .wasm 二进制模块，反编译为 WAT 文本格式后仍难以理解55% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/735669API
curl https://kongchang.com/api/v1/knowledge/claims/735669MCP
get_claim(id=735669)