AI 中文总结
针对微信小程序界面交互与操作安全问题，本文开发融合YOLOv8与mitmproxy的混合检测框架，可检查UI合规性并评估网络风险，保障用户财产安全。
AI 中文摘要
随着微信生态的持续发展，微信小程序因无需安装、占用内存小、即点即用的优势，用户数量激增，现已成为移动互联网中不可或缺的服务载体。然而，随着小程序迅速普及，其界面交互设计的合规性与操作行为的安全性问题日益凸显。许多小程序存在可点击按钮和图标尺寸不规范、广告弹窗及支付入口放置易误点击的问题；关闭或取消按钮常过小或隐藏，易导致用户误点击广告或支付内容，且难以准确点击取消按钮，可能造成非自愿支付或跳转至非法页面，引发不必要的经济损失，严重损害用户财产安全与合法权益。为解决上述问题，本文开发了一款检测程序，用于检查小程序中各类图标与按钮的位置和尺寸，并分析跳转链接是否处于安全范围。该程序采用YOLOv8识别图像中的各类按钮，根据鼠标点击位置显示对应图标及其数据，标记并记录违规情况；同时使用mitmproxy捕获点击时产生的相关数据请求，分析跳转的安全性，并呈现关键信息供用户查看。
英文摘要
With the continuous development of the WeChat ecosystem, WeChat Mini Programs, due to their advantages of not requiring installation, using little memory, and being ready to use instantly, have seen a surge in user numbers and have now become an indispensable service carrier in mobile internet. However, as Mini Programs rapidly became popular, issues regarding the compliance of their interface interaction design and the safety of operational behavior have become increasingly apparent. Many Mini Programs have problems such as clickable buttons and icons not being standard in size, or ad pop-ups and payment entrances being placed in a way that is easy to misclick. The close or cancel buttons are often too small or hidden, making it easy to accidentally click on ads or payment content, and difficult to accurately click the cancel button. This can result in involuntary payments or being redirected to illegal pages, causing unnecessary financial losses and seriously harming users' property security and legal rights. To address the above issues, this article develops a detection program to check the position and size of various icons and buttons in Mini Programs, and analyze whether redirected links fall within a safe range. YOLOv8 is used to identify various buttons in images, displaying the corresponding icon and its data based on the mouse click position. Violations are flagged and recorded. At the same time, mitmproxy is used to capture relevant data requests generated during clicks, analyzing the safety of redirections, and presenting key information for user observation.
