diff --git a/README.md b/README.md
index 6b9aee1..51460e8 100644
--- a/README.md
+++ b/README.md
@@ -80,7 +80,7 @@ The verification of the upload option may have problems, you can ignore it, and
 
 ### How to use in Obsidian
 
-In the community plugins, search for and install the Image auto upload Plugin. Next, go to the plugin settings page and change the default uploader to PicGo(app). Set the PicGo server to http://127.0.0.1:36677/upload as shown in the image below. Additionally, this plugin also supports cloud-based deletion through PicList. To use this feature, enter http://127.0.0.1:36677/delete in the deletion interface.
+In the community plugins, search for and install the Image auto upload Plugin. Next, go to the plugin settings page and change the default uploader to PicGo(app). Set the PicGo server to `http://127.0.0.1:36677/upload` as shown in the image below. Additionally, this plugin also supports cloud-based deletion through PicList. To use this feature, enter `http://127.0.0.1:36677/delete` in the deletion interface.
 
 ![image](https://user-images.githubusercontent.com/96409857/226522718-8378c480-9fb4-4785-87e1-d59808862016.png)
 
diff --git a/currentVersion.md b/currentVersion.md
index 461390d..62f78c1 100644
--- a/currentVersion.md
+++ b/currentVersion.md
@@ -1,7 +1,9 @@
 ✨ Features
 
-- 现在已经设置了水印字体文件路径或者使用图片水印时，不再检查内置字体文件
+- 现在当已经设置了水印字体文件路径或使用图片水印时，不再检查内置字体文件是否存在
 - PicList和PicList-Core的内置服务器现在均支持通过`formData`的方式上传图片文件
+- 内置服务器现在默认监听`0.0.0.0`，而不是`127.0.0.1`，以配合多电脑间使用
+- 内置服务器现在支持设置鉴权密钥`key`参数，通过url参数形式传递`?key=xxx`，避免被恶意利用
 - PicList-Core现在支持通过`picgo-server`启动内置上传服务器，使用方式与PicList的内置服务器相同
 
 🐛 Bug Fixes
diff --git a/currentVersion_en.md b/currentVersion_en.md
index 93b09b2..4452291 100644
--- a/currentVersion_en.md
+++ b/currentVersion_en.md
@@ -3,7 +3,9 @@
 - Now that the watermark font file path has been set or the image watermark is used, the built-in font file is no longer checked
 - The built-in server of PicList and PicList-Core now support uploading image files through `formData`
 - PicList-Core now supports starting the built-in upload server through `picgo-server`, and the usage is the same as the built-in server of PicList
+- The built-in server now supports setting the authentication key `key` parameter, which is passed in the form of url parameters `?key=xxx` to avoid being maliciously used
+- PicList-Core now supports starting the built-in upload server through `picgo-server`, and the usage is the same as the built-in server of PicList
 
 🐛 Bug Fixes
 
-- Fix the problem that the local image bed upload fails due to not creating a new temporary folder
\ No newline at end of file
+- Fix the problem that the local image bed upload fails due to not creating a new temporary folder