SOURCE RECORD · S07
S07 · VPN TP
Direct HTTPS text download
保留原行号。个人／账户信息如有删除，已用 REDACTED 标识。原文件 SHA-256 只用于识别截取时的本机原文件；不能证明编写或提交时间，也不等于脱敏下载文件的哈希。
Original line numbers are retained. Redactions are explicitly marked. The original full-file hash identifies a captured local file, not its creation/submission time or the redacted download. Public-file hashes are listed separately. This is selected source, not a whole-repository or binary absence finding.
Project key: vpn
Original relative path: ConfigStudio/Import/SubscriptionImportService.swift
Captured: 2026-09-12T18:57:15+08:00
Original full-file SHA256: 71969530b54cfc664a003d02ef5798df2da38f59d4b3f5bb42d7983747b5776c
Evidence level: local source excerpt
Build correspondence: not yet established with an Apple-received binary.
Line numbers refer to the captured original file. Gaps are explicitly marked. No source code was changed.
Original lines 155 to 207
0155
0156 struct SubscriptionImportService: SubscriptionImporting {
0157 static let maximumSize = 10 * 1_024 * 1_024
0158 private let providedConfiguration: URLSessionConfiguration?
0159
0160 init(configuration: URLSessionConfiguration? = nil) {
0161 providedConfiguration = configuration
0162 }
0163
0164 func fetch(_ rawURL: String) async throws -> SubscriptionPayload {
0165 let url = try SubscriptionURLPolicy.validatedURL(from: rawURL)
0166 let configuration = providedConfiguration ?? URLSessionConfiguration.ephemeral
0167 configuration.requestCachePolicy = .reloadIgnoringLocalCacheData
0168 configuration.timeoutIntervalForRequest = 20
0169 configuration.timeoutIntervalForResource = 30
0170 configuration.httpCookieStorage = nil
0171 configuration.httpShouldSetCookies = false
0172 configuration.urlCredentialStorage = nil
0173 configuration.urlCache = nil
0174 configuration.httpMaximumConnectionsPerHost = 1
0175
0176 let session = URLSession(configuration: configuration)
0177 defer { session.invalidateAndCancel() }
0178 var request = URLRequest(url: url)
0179 request.httpMethod = "GET"
0180 request.httpShouldHandleCookies = false
0181 request.setValue("text/plain, application/yaml, application/json, application/octet-stream;q=0.8, */*;q=0.5", forHTTPHeaderField: "Accept")
0182 request.setValue("VPN-TP/1.0.1", forHTTPHeaderField: "User-Agent")
0183
0184 do {
0185 let (bytes, response) = try await session.bytes(for: request, delegate: SubscriptionRedirectDelegate())
0186 try Task.checkCancellation()
0187 guard let http = response as? HTTPURLResponse,
0188 (200...299).contains(http.statusCode) else {
0189 throw AppError.subscriptionHTTP
0190 }
0191 guard http.expectedContentLength <= Int64(Self.maximumSize) else {
0192 throw AppError.fileTooLarge
0193 }
0194 var data = Data()
0195 if http.expectedContentLength > 0 { data.reserveCapacity(Int(http.expectedContentLength)) }
0196 for try await byte in bytes {
0197 try Task.checkCancellation()
0198 guard data.count < Self.maximumSize else { throw AppError.fileTooLarge }
0199 data.append(byte)
0200 }
0201 guard let content = String(data: data, encoding: .utf8) else {
0202 throw AppError.subscriptionEncoding
0203 }
0204 let clean = content.trimmingCharacters(in: .whitespacesAndNewlines)
0205 guard !clean.isEmpty else { throw AppError.emptyContent }
0206 let finalURL = http.url ?? url
0207 return SubscriptionPayload(