gitee
/
snowy
mirror of https://gitee.com/xiaonuobase/snowy
1
0
Fork 0
Code Issues Projects Releases Wiki Activity

【修复】修复可通过UA设置长文本绕过日志记录的漏洞

pull/186/head
vchao 2023-12-08 16:32:51 +08:00 committed by 小诺
parent cf711fd466
commit 5b9d2866ee
1 changed files with 6 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
snowy-common/src/main/java/vip/xiaonuo/common/util/CommonUaUtil.java
View File

@ -41,6 +41,9 @@ public class CommonUaUtil {
return StrUtil.DASHED; return StrUtil.DASHED;
} else { } else {
String browser = userAgent.getBrowser().toString(); String browser = userAgent.getBrowser().toString();
if (StrUtil.isNotBlank(browser) && browser.length() > 250) {
browser = browser.substring(0, 250);
}
return "Unknown".equals(browser) ? StrUtil.DASHED : browser; return "Unknown".equals(browser) ? StrUtil.DASHED : browser;
} }
} }
@ -57,6 +60,9 @@ public class CommonUaUtil {
return StrUtil.DASHED; return StrUtil.DASHED;
} else { } else {
String os = userAgent.getOs().toString(); String os = userAgent.getOs().toString();
if (StrUtil.isNotBlank(os) && os.length() > 250) {
os = os.substring(0, 250);
}
return "Unknown".equals(os) ? StrUtil.DASHED : os; return "Unknown".equals(os) ? StrUtil.DASHED : os;
} }
} }