mirror of https://gitee.com/y_project/RuoYi.git
定时任务屏蔽违规的字符
parent
008a461968
commit
063ee7f773
|
@ -111,5 +111,5 @@ public class Constants
|
||||||
* 定时任务违规的字符
|
* 定时任务违规的字符
|
||||||
*/
|
*/
|
||||||
public static final String[] JOB_ERROR_STR = { "java.net.URL", "javax.naming.InitialContext", "org.yaml.snakeyaml",
|
public static final String[] JOB_ERROR_STR = { "java.net.URL", "javax.naming.InitialContext", "org.yaml.snakeyaml",
|
||||||
"org.springframework", "org.apache" };
|
"org.springframework", "org.apache", "com.ruoyi.common.utils.file" };
|
||||||
}
|
}
|
|
@ -143,7 +143,7 @@ public class SysJobController extends BaseController
|
||||||
}
|
}
|
||||||
else if (StringUtils.containsAnyIgnoreCase(job.getInvokeTarget(), new String[] { Constants.LOOKUP_LDAP, Constants.LOOKUP_LDAPS }))
|
else if (StringUtils.containsAnyIgnoreCase(job.getInvokeTarget(), new String[] { Constants.LOOKUP_LDAP, Constants.LOOKUP_LDAPS }))
|
||||||
{
|
{
|
||||||
return error("新增任务'" + job.getJobName() + "'失败,目标字符串不允许'ldap'调用");
|
return error("新增任务'" + job.getJobName() + "'失败,目标字符串不允许'ldap(s)'调用");
|
||||||
}
|
}
|
||||||
else if (StringUtils.containsAnyIgnoreCase(job.getInvokeTarget(), new String[] { Constants.HTTP, Constants.HTTPS }))
|
else if (StringUtils.containsAnyIgnoreCase(job.getInvokeTarget(), new String[] { Constants.HTTP, Constants.HTTPS }))
|
||||||
{
|
{
|
||||||
|
|
|
@ -121,7 +121,7 @@ public class ScheduleUtils
|
||||||
*/
|
*/
|
||||||
public static boolean whiteList(String invokeTarget)
|
public static boolean whiteList(String invokeTarget)
|
||||||
{
|
{
|
||||||
String packageName = StringUtils.substringBefore(invokeTarget, ")");
|
String packageName = StringUtils.substringBefore(invokeTarget, "(");
|
||||||
int count = StringUtils.countMatches(packageName, ".");
|
int count = StringUtils.countMatches(packageName, ".");
|
||||||
if (count > 1)
|
if (count > 1)
|
||||||
{
|
{
|
||||||
|
|
Loading…
Reference in New Issue