Ask HN：谷歌清除域名后，Safari安全浏览的误报问题依然存在
1 分•作者: Numbness•5 个月前
Safari 维护两个独立的“安全浏览”数据库：
* Apple/social\_engineering,any\_platform,url\_expression（苹果专有，943 KB）
* Google/social\_engineering,osx,url\_expression（谷歌的列表）
同步似乎是单向的：苹果从谷歌复制新增内容，但**不**处理删除。一个被谷歌安全浏览清除的域名，在 Safari 中会永久被阻止，且没有自动移除的途径。
复现步骤：
1. 在 Safari 中访问 https://openvan.camp/ → 全屏红色“欺诈网站警告”
2. 在 Chrome/Firefox/Edge 中访问相同的 URL → 无警告
3. 删除 \~/Library/Caches/com.apple.Safari.SafeBrowsing/ → 重新启动 Safari → 警告立即从新的数据库下载后重新出现
所有外部数据库都显示干净：
* 谷歌安全浏览：干净
* VirusTotal：0/65 供应商
* URLVoid：0/35 引擎
* Spamhaus DBL、Gridinsoft、FortiGuard：已移除/干净
Sysdiagnose 确认 Safari 每 30 分钟左右通过 OHTTP/QUIC 连接到 mask.icloud.com（HTTP 200，约 450 毫秒），但苹果的列表在每次刷新周期中都保留该条目。这**不是**一个缓存问题——这是苹果专有 feed 中缺少删除机制。
最初的标记（2026 年 3 月）是由一个第三方广告网络（Adsterra）提供恶意重定向引起的。它于 3 月 18 日被移除。所有修复均已完成。websitereview.apple.com 于 3 月 18 日提交——6 天后无回复。
WebKit Bugzilla：https://bugs.webkit.org/show\_bug.cgi?id=310606
Apple Radar：rdar://173213501
还有人遇到过这种情况吗？除了 websitereview.apple.com 之外，还有其他已知的升级途径吗？
查看原文
Safari maintains two independent Safe Browsing databases:
- Apple/social_engineering,any_platform,url_expression (Apple-proprietary, 943 KB)
- Google/social_engineering,osx,url_expression (Google's list)<p>The sync appears one-directional: Apple copies additions from Google but does NOT process deletions. A domain cleared by Google Safe Browsing remains permanently blocked in Safari with no automated removal path.<p>Reproduction:
1. Navigate to https://openvan.camp/ in Safari → full-screen red "Fraudulent Website Warning"
2. Same URL in Chrome/Firefox/Edge → no warning
3. Delete ~/Library/Caches/com.apple.Safari.SafeBrowsing/ → relaunch Safari → warning reappears immediately from fresh DB download<p>All external databases show clean:
- Google Safe Browsing: clean
- VirusTotal: 0/65 vendors
- URLVoid: 0/35 engines
- Spamhaus DBL, Gridinsoft, FortiGuard: removed/clean<p>Sysdiagnose confirms Safari connects to mask.icloud.com via OHTTP/QUIC every ~30 min (HTTP 200, ~450ms) yet Apple's list retains the entry on every refresh cycle. This is not a caching issue — it is a missing deletion mechanism in Apple's proprietary feed.<p>The original flag (March 2026) was caused by a third-party ad network (Adsterra) serving malicious redirects. It was removed on March 18. All remediations completed. websitereview.apple.com submitted March 18 — no response after 6 days.<p>WebKit Bugzilla: https://bugs.webkit.org/show_bug.cgi?id=310606
Apple Radar: rdar://173213501<p>Has anyone else hit this? Is there any known escalation path beyond websitereview.apple.com?