From 91cd1293811ca2e0029838a408cfe9938662ea85 Mon Sep 17 00:00:00 2001
From: sirius60111 <sirius60111@users.noreply.github.com>
Date: Mon, 13 Jul 2026 13:43:03 +0800
Subject: [PATCH] fix(route/xueqiu): fetch today hot list via api.xueqiu.com to
 bypass WAF (#22689)

The /xueqiu/today route requested statuses/hot/listV2.json on xueqiu.com,
which the Alibaba Cloud WAF blocks (returns a challenge page instead of
JSON), so response.data.items was undefined and the route threw 503.
Switch the endpoint to api.xueqiu.com, which serves the same JSON without
the WAF challenge. Also mark antiCrawler: true.

Co-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
---
 lib/routes/xueqiu/today.ts | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/lib/routes/xueqiu/today.ts b/lib/routes/xueqiu/today.ts
index 4a6b88ecb..fe57fac6b 100644
--- a/lib/routes/xueqiu/today.ts
+++ b/lib/routes/xueqiu/today.ts
@@ -14,7 +14,7 @@ export const route: Route = {
     features: {
         requireConfig: false,
         requirePuppeteer: false,
-        antiCrawler: false,
+        antiCrawler: true,
         supportBT: false,
         supportPodcast: false,
         supportScihub: false,
@@ -35,7 +35,7 @@ async function handler(ctx) {
 
     const rootUrl = 'https://xueqiu.com';
     const currentUrl = `${rootUrl}/today`;
-    const apiUrl = `${rootUrl}/statuses/hot/listV2.json?since_id=-1&size=${size}`;
+    const apiUrl = `https://api.xueqiu.com/statuses/hot/listV2.json?since_id=-1&size=${size}`;
 
     const token = await parseToken(currentUrl);
     const response = await got({