From cb2fdad301177f49e8ed147de779f38874b76892 Mon Sep 17 00:00:00 2001
From: action <actions@github.com>
Date: Tue, 29 Sep 2026 18:19:55 +0800
Subject: [PATCH] update 2026-09-29 18:19:55

---
 .../root/usr/share/rpcd/acl.d/luci-app-oxidns.json           | 4 ++++
 luci-app-passwall/root/usr/share/passwall/subscribe.lua      | 5 +++++
 2 files changed, 9 insertions(+)

diff --git a/luci-app-oxidns/root/usr/share/rpcd/acl.d/luci-app-oxidns.json b/luci-app-oxidns/root/usr/share/rpcd/acl.d/luci-app-oxidns.json
index 064b53ef..b8f682f6 100644
--- a/luci-app-oxidns/root/usr/share/rpcd/acl.d/luci-app-oxidns.json
+++ b/luci-app-oxidns/root/usr/share/rpcd/acl.d/luci-app-oxidns.json
@@ -13,6 +13,10 @@
 			}
 		},
 		"write": {
+			"cgi-io": [ "upload" ],
+			"file": {
+				"/tmp/oxidns-core-upload-*": [ "write" ]
+			},
 			"ubus": {
 				"luci.oxidns": [
 					"core_install",
diff --git a/luci-app-passwall/root/usr/share/passwall/subscribe.lua b/luci-app-passwall/root/usr/share/passwall/subscribe.lua
index 82451cc1..4faa832f 100755
--- a/luci-app-passwall/root/usr/share/passwall/subscribe.lua
+++ b/luci-app-passwall/root/usr/share/passwall/subscribe.lua
@@ -1779,6 +1779,9 @@ local function curl(url, file, ua, mode)
 	ua = (ua == "passwall") and ("passwall/" .. api.get_version()) or ua
 	curl_args[#curl_args + 1] = '--user-agent "' .. ua .. '"'
 
+	local cookie_file = "/tmp/cookie_" .. api.gen_random_char(5)
+	curl_args[#curl_args + 1] = '-c "' .. cookie_file .. '" -b "' .. cookie_file .. '"'
+
 	local return_code, result
 	if mode == "direct" then
 		return_code, result = api.curl_base(url, file, curl_args)
@@ -1801,6 +1804,8 @@ local function curl(url, file, ua, mode)
 		header_str = header_str:gsub("\r", "")
 	end
 
+	luci.sys.call('rm -f "%s"' % cookie_file)
+
 	return return_code, http_code, header_str
 end