From 641055ab742c5b2499a4aeb23b466c4f6c61014e Mon Sep 17 00:00:00 2001
From: hotyue <52734432+hotyue@users.noreply.github.com>
Date: Tue, 28 Apr 2026 00:20:49 +0000
Subject: [PATCH] =?UTF-8?q?fix(core):=20=E4=B8=BA=E6=B7=B1=E6=B5=B7?=
 =?UTF-8?q?=E5=A3=B0=E5=91=90=E6=8E=A2=E9=92=88=E6=8B=89=E5=8F=96=E5=BC=95?=
 =?UTF-8?q?=E5=85=A5=E6=BA=90=E6=96=87=E4=BB=B6=E5=9F=BA=E5=9B=A0=E9=98=B2?=
 =?UTF-8?q?=E4=BC=AA=E6=A0=A1=E9=AA=8C=EF=BC=8C=E5=BD=BB=E5=BA=95=E9=98=BB?=
 =?UTF-8?q?=E6=96=AD=20HTML=20=E6=8A=95=E6=AF=92=E4=B8=8E=E7=BD=91?=
 =?UTF-8?q?=E7=BB=9C=E5=8A=AB=E6=8C=81=E5=AF=BC=E8=87=B4=E7=9A=84=E5=81=87?=
 =?UTF-8?q?=E6=AD=BB=E5=8F=98=E7=A0=96?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 core/updater.sh | 7 ++++++-
 1 file changed, 6 insertions(+), 1 deletion(-)

diff --git a/core/updater.sh b/core/updater.sh
index f1f6310..01d838f 100755
--- a/core/updater.sh
+++ b/core/updater.sh
@@ -139,10 +139,15 @@ fi
 # ==========================================================
 TMP_PROBE="/tmp/ip_sentinel_probe.sh"
 $CURL_CMD "https://raw.githubusercontent.com/xykt/IPQuality/main/ip.sh" -o "$TMP_PROBE"
-if [ -s "$TMP_PROBE" ]; then
+
+# 🛡️ 供应链防毒：验证脚本内是否包含原作者特有签名，防止被墙重定向为 HTML
+if [ -s "$TMP_PROBE" ] && grep -q "xykt" "$TMP_PROBE" 2>/dev/null; then
     mv "$TMP_PROBE" "${INSTALL_DIR}/core/ip_probe.sh"
     chmod +x "${INSTALL_DIR}/core/ip_probe.sh"
     log "Updater" "INFO " "✅ 深海声呐底层探针 (ip_probe.sh) 源文件安全对齐"
+else
+    log "Updater" "WARN " "❌ 探针源文件拉取受损或遭投毒劫持，已触发防砖机制，保留本地旧版本"
+    rm -f "$TMP_PROBE" 2>/dev/null
 fi
 
 # ==========================================================