Skip to content
Projects
Groups
Snippets
Help
Loading...
Help
Support
Keyboard shortcuts
?
Submit feedback
Contribute to GitLab
Sign in
Toggle navigation
F
finance-manage
Project overview
Project overview
Details
Activity
Releases
Repository
Repository
Files
Commits
Branches
Tags
Contributors
Graph
Compare
Issues
0
Issues
0
List
Boards
Labels
Milestones
Merge Requests
0
Merge Requests
0
CI / CD
CI / CD
Pipelines
Jobs
Schedules
Analytics
Analytics
CI / CD
Repository
Value Stream
Wiki
Wiki
Snippets
Snippets
Members
Members
Collapse sidebar
Close sidebar
Activity
Graph
Create a new issue
Jobs
Commits
Issue Boards
Open sidebar
finance-oa
finance-manage
Commits
578d65df
Commit
578d65df
authored
Jan 05, 2022
by
RuoYi
Browse files
Options
Browse Files
Download
Email Patches
Plain Diff
定时任务目标字符串过滤特殊字符
parent
db4c2d3d
Changes
2
Hide whitespace changes
Inline
Side-by-side
Showing
2 changed files
with
7 additions
and
7 deletions
+7
-7
ruoyi-common/src/main/java/com/ruoyi/common/constant/Constants.java
...on/src/main/java/com/ruoyi/common/constant/Constants.java
+3
-3
ruoyi-quartz/src/main/java/com/ruoyi/quartz/controller/SysJobController.java
...in/java/com/ruoyi/quartz/controller/SysJobController.java
+4
-4
No files found.
ruoyi-common/src/main/java/com/ruoyi/common/constant/Constants.java
View file @
578d65df
...
...
@@ -142,16 +142,16 @@ public class Constants
/**
* RMI 远程方法调用
*/
public
static
final
String
LOOKUP_RMI
=
"rmi:
//
"
;
public
static
final
String
LOOKUP_RMI
=
"rmi:"
;
/**
* LDAP 远程方法调用
*/
public
static
final
String
LOOKUP_LDAP
=
"ldap:
//
"
;
public
static
final
String
LOOKUP_LDAP
=
"ldap:"
;
/**
* 定时任务违规的字符
*/
public
static
final
String
[]
JOB_ERROR_STR
=
{
"java.net.URL"
,
"javax.naming.InitialContext"
,
"org.yaml.snakeyaml"
,
"org.springframework
.jndi
"
};
"org.springframework"
};
}
\ No newline at end of file
ruoyi-quartz/src/main/java/com/ruoyi/quartz/controller/SysJobController.java
View file @
578d65df
...
...
@@ -87,11 +87,11 @@ public class SysJobController extends BaseController
}
else
if
(
StringUtils
.
containsIgnoreCase
(
job
.
getInvokeTarget
(),
Constants
.
LOOKUP_RMI
))
{
return
error
(
"新增任务'"
+
job
.
getJobName
()
+
"'失败,目标字符串不允许'rmi
://
'调用"
);
return
error
(
"新增任务'"
+
job
.
getJobName
()
+
"'失败,目标字符串不允许'rmi'调用"
);
}
else
if
(
StringUtils
.
containsIgnoreCase
(
job
.
getInvokeTarget
(),
Constants
.
LOOKUP_LDAP
))
{
return
error
(
"新增任务'"
+
job
.
getJobName
()
+
"'失败,目标字符串不允许'ldap
://
'调用"
);
return
error
(
"新增任务'"
+
job
.
getJobName
()
+
"'失败,目标字符串不允许'ldap'调用"
);
}
else
if
(
StringUtils
.
containsAnyIgnoreCase
(
job
.
getInvokeTarget
(),
new
String
[]
{
Constants
.
HTTP
,
Constants
.
HTTPS
}))
{
...
...
@@ -119,11 +119,11 @@ public class SysJobController extends BaseController
}
else
if
(
StringUtils
.
containsIgnoreCase
(
job
.
getInvokeTarget
(),
Constants
.
LOOKUP_RMI
))
{
return
error
(
"修改任务'"
+
job
.
getJobName
()
+
"'失败,目标字符串不允许'rmi
://
'调用"
);
return
error
(
"修改任务'"
+
job
.
getJobName
()
+
"'失败,目标字符串不允许'rmi'调用"
);
}
else
if
(
StringUtils
.
containsIgnoreCase
(
job
.
getInvokeTarget
(),
Constants
.
LOOKUP_LDAP
))
{
return
error
(
"修改任务'"
+
job
.
getJobName
()
+
"'失败,目标字符串不允许'ldap
://
'调用"
);
return
error
(
"修改任务'"
+
job
.
getJobName
()
+
"'失败,目标字符串不允许'ldap'调用"
);
}
else
if
(
StringUtils
.
containsAnyIgnoreCase
(
job
.
getInvokeTarget
(),
new
String
[]
{
Constants
.
HTTP
,
Constants
.
HTTPS
}))
{
...
...
Write
Preview
Markdown
is supported
0%
Try again
or
attach a new file
Attach a file
Cancel
You are about to add
0
people
to the discussion. Proceed with caution.
Finish editing this message first!
Cancel
Please
register
or
sign in
to comment