From 99008cf813f7afbd457a0a890f2d50d2f82408aa Mon Sep 17 00:00:00 2001
From: hrz <1710360675@qq.com>
Date: Mon, 15 Sep 2025 21:31:22 +0800
Subject: [PATCH] =?UTF-8?q?update:mqtt=E5=AF=86=E9=92=A5=E7=A6=81=E6=AD=A2?=
 =?UTF-8?q?=E5=8C=85=E5=90=AB=E5=BC=B1=E5=AF=86=E7=A0=81?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 .../modules/sys/controller/SysParamsController.java        | 7 +++++++
 1 file changed, 7 insertions(+)

diff --git a/main/manager-api/src/main/java/xiaozhi/modules/sys/controller/SysParamsController.java b/main/manager-api/src/main/java/xiaozhi/modules/sys/controller/SysParamsController.java
index dfef8fca..d1c116c3 100644
--- a/main/manager-api/src/main/java/xiaozhi/modules/sys/controller/SysParamsController.java
+++ b/main/manager-api/src/main/java/xiaozhi/modules/sys/controller/SysParamsController.java
@@ -284,5 +284,12 @@ public class SysParamsController {
         if (!secret.matches(".*[a-z].*") || !secret.matches(".*[A-Z].*")) {
             throw new RenException("您的mqtt密钥长度不安全，mqtt密钥必须同时包含大小写字母");
         }
+        // 不允许包含弱密码
+        String[] weakPasswords = { "test", "1234", "admin", "password", "qwerty", "xiaozhi" };
+        for (String weakPassword : weakPasswords) {
+            if (secret.toLowerCase().contains(weakPassword)) {
+                throw new RenException("您的mqtt密钥包含弱密码：" + weakPassword);
+            }
+        }
     }
 }