bruh

main.js

@@ -379,6 +379,12 @@ app.options('/ncm/url', function (req, res) {
     res.end()
 })
 app.post("/ncm/url", function (req, res) {
+    try{
+        Number.parseInt(req.query.id);
+    }catch(err){
+        res.status(500).header("Access-Control-Allow-Origin", "*").end("错误");
+        return
+    }
     if (req.body.id !== undefined && req.body.kind !== undefined) {
         try {
             let id = req.body.id