fix: Fixed some security bugs.

dist/utils/Global.js

@@ -5,38 +5,23 @@ var __importDefault = (this && this.__importDefault) || function (mod) {
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.defaultTesseractConfig = exports.defaultHeaders = exports.generateDeviceId = exports.getTimeNow = void 0;
 const moment_1 = __importDefault(require("moment"));
-const randomstring_1 = require("randomstring");
-/**
- * A function that encode the time to the right format.
- * @returns The time in right format.
- */
 function getTimeNow() {
     return (0, moment_1.default)().format("YYYYMMDDHHmmss" + (0, moment_1.default)().millisecond().toString().slice(0, -1));
 }
 exports.getTimeNow = getTimeNow;
-/**
- * A function for generating the device ID.
- * @returns The device ID generated.
- */
 function generateDeviceId() {
-    return (0, randomstring_1.generate)({ length: 8, charset: "hex" }) + "-mbib-0000-0000-" + getTimeNow();
+    return "s1rmi184-mbib-0000-0000-" + getTimeNow();
 }
 exports.generateDeviceId = generateDeviceId;
-/**
- * A const for default request headers.
- */
 exports.defaultHeaders = {
+    'Cache-Control': 'no-cache',
+    'Accept': 'application/json, text/plain, */*',
     'Authorization': 'Basic RU1CUkVUQUlMV0VCOlNEMjM0ZGZnMzQlI0BGR0AzNHNmc2RmNDU4NDNm',
-    'User-Agent': "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_2) AppleWebKit/600.4.10 (KHTML, like Gecko) Version/8.0.4 Safari/600.4.10",
+    'User-Agent': "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36",
     "Origin": "https://online.mbbank.com.vn",
     "Referer": "https://online.mbbank.com.vn/",
     "Content-Type": "application/json; charset=UTF-8",
-    "Connection": "keep-alive",
-    "Elastic-Apm-Traceparent": "00-a05b1d8ae659c91d9254ab749abd3e90-e25b5955e860a55e-01",
 };
-/**
- * Recommended Tesseract OCR config.
- */
 exports.defaultTesseractConfig = {
     lang: "eng",
     oem: 1,

package.json

@@ -1,6 +1,6 @@
 {
   "name": "mbbank",
-  "version": "1.3.0",
+  "version": "1.4.0",
   "description": "An promise-based unofficial API wrapper for Vietnam Military Commercial Joint Stock Bank (MBBank, MB)",
   "main": "dist/index.js",
   "types": "typings/index.d.ts",