【优化】dockerfile构建

【优化】检测平台访问限制

Author: Bacon-123

dockerfile

@@ -10,13 +10,18 @@ RUN apt-get update && apt-get install -y \
     && rm -rf /var/lib/apt/lists/*
 
 # 复制源代码
-COPY . .
+# 只需要三个文件 shieldml_scan.html 和 shieldml_server.go 和 bt-shieldml
+COPY shieldml_scan.html .
+COPY shieldml_server.go .
+COPY bt-shieldml .
+COPY go.mod .
 
 # 安装Go依赖
-RUN go mod download
+# RUN go mod download
 
 # 只编译shieldml_server
-RUN go build -tags netgo,osusergo -ldflags '-s -w -extldflags "-static"' -o shieldml_server ./shieldml_server.go
+RUN go mod tidy && \
+    go build -tags netgo,osusergo -ldflags '-s -w -extldflags "-static"' -o shieldml_server ./shieldml_server.go
 
 # 第二阶段：运行环境
 FROM debian:11-slim

shieldml_server.go

@@ -69,14 +69,21 @@ func main() {
 
 	// 静态文件处理
 	fileHandler := http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) {
-		// 只允许访问shieldml_scan.html
-		if r.URL.Path == "/" || r.URL.Path == "/index.html" {
-			http.Redirect(w, r, "/shieldml_scan.html", http.StatusFound)
-		} else if r.URL.Path == "/shieldml_scan.html" {
+		// 允许访问API路径
+		if strings.HasPrefix(r.URL.Path, "/api/") {
+			// API 请求会在单独的处理器中处理，这里不做操作
+			http.NotFound(w, r)
+			return
+		}
+
+		// 允许访问 shieldml_scan.html
+		if r.URL.Path == "/shieldml_scan.html" {
 			http.ServeFile(w, r, "shieldml_scan.html")
-		} else {
-			http.Error(w, "拒绝访问", http.StatusForbidden)
+			return
 		}
+
+		// 所有其他路径都重定向到 shieldml_scan.html
+		http.Redirect(w, r, "/shieldml_scan.html", http.StatusFound)
 	})
 
 	// 应用安全中间件