Revert "fix: 保留用户/规则高级设置并增强节点运行时恢复 (#468)"

This reverts commit 3f374df724.

go-backend/internal/http/handler/security_utils.go

@@ -11,37 +11,11 @@ var DisableSafeRemoteAddrCheckForTesting = false
 
 // IsSafeRemoteAddr checks if a given address is safe to connect to (prevents SSRF/Open Proxy).
 // It resolves domains to IPs to prevent DNS rebinding attacks pointing to internal networks.
-// Supports multiple addresses separated by commas or newlines (one per line).
 func IsSafeRemoteAddr(addr string) error {
 	if DisableSafeRemoteAddrCheckForTesting {
 		return nil
 	}
 
-	for _, part := range splitRemoteParts(addr) {
-		if err := checkSingleRemoteAddr(part); err != nil {
-			return err
-		}
-	}
-	return nil
-}
-
-// splitRemoteParts splits a multi-address string by commas and newlines.
-func splitRemoteParts(addr string) []string {
-	addr = strings.ReplaceAll(addr, "\n", ",")
-	addr = strings.ReplaceAll(addr, "\r", ",")
-	parts := strings.Split(addr, ",")
-	out := make([]string, 0, len(parts))
-	for _, part := range parts {
-		part = strings.TrimSpace(part)
-		if part != "" {
-			out = append(out, part)
-		}
-	}
-	return out
-}
-
-// checkSingleRemoteAddr validates a single address.
-func checkSingleRemoteAddr(addr string) error {
 	host, _, err := net.SplitHostPort(addr)
 	if err != nil {
 		if strings.Contains(err.Error(), "missing port in address") {
@@ -53,12 +27,12 @@ func checkSingleRemoteAddr(addr string) error {
 
 	ips, err := net.LookupIP(host)
 	if err != nil {
-		return fmt.Errorf("could not resolve address %q: %v", addr, err)
+		return fmt.Errorf("could not resolve address: %v", err)
 	}
 
 	for _, ip := range ips {
 		if ip.IsLoopback() || ip.IsPrivate() {
-			return fmt.Errorf("address %q resolves to internal IP: %s", addr, ip.String())
+			return fmt.Errorf("address resolves to internal IP: %s", ip.String())
 		}
 	}