wechat-article-spider

This code downloads image URLs extracted from HTML and writes response bodies under output_dir/images. If the HTML or base_url is untrusted, the unvalidated requests.get calls can reach internal services or other unintended destinations, including through redirects; downloads also have no size limit. The fixed Referer is https://mp.weixin.qq[.]com/ and is not evidence of data exfiltration. Severity is moderate, primarily due to SSRF and resource-exhaustion risk; no clear malware or obfuscation is present.