ok

public/js/main.js

@@ -82,6 +82,7 @@ async function loadCommandHistory() {
             li.textContent = `${filterXSS(item.command)} (${new Date(item.timestamp).toLocaleString()})`;
             li.className = 'cursor-pointer hover:text-blue-500';
             li.onclick = () => {
+                console.log(`Clicked on command: ${item.command}`); // 添加调试信息
                 commandInput.value = item.command;
             };
             history.appendChild(li);

routes/command.js

@@ -33,10 +33,10 @@ router.post('/execute', async (req, res) => {
     const baseCommand = command.split(' ')[0];
 
     // 白名单检查的部分
-    if (!allowedCommands.includes(baseCommand)) {
-        logger.warn(`用户 ${req.user.username} 尝试执行未授权的命令: ${command}`);
-        return res.status(403).json({ error: '未授权的命令' });
-    }
+    // if (!allowedCommands.includes(baseCommand)) {
+    //     logger.warn(`用户 ${req.user.username} 未授权的命令: ${command}`);
+    //     return res.status(403).json({ error: '未授权命令' });
+    // }
 
     execFile(baseCommand, command.split(' ').slice(1), { timeout: 5000 }, async (error, stdout, stderr) => {
         if (error) {