github
/
RuoYi
mirror of https://gitee.com/y_project/RuoYi.git
1
0
Fork 0
Code Issues Projects Releases Wiki Activity

任务屏蔽违规字符

pull/340/head
RuoYi 2021-10-30 10:27:07 +08:00
parent 7c1fa482ba
commit 775d77ee6d
2 changed files with 16 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

8
ruoyi-common/src/main/java/com/ruoyi/common/constant/Constants.java
View File

@ -116,4 +116,10 @@ public class Constants
* LDAP 远程方法调用 * LDAP 远程方法调用
*/ */
public static final String LOOKUP_LDAP = "ldap://"; public static final String LOOKUP_LDAP = "ldap://";
}
/**
* 定时任务违规的字符
*/
public static final String[] JOB_ERROR_STR = { "java.net.URL", "javax.naming.InitialContext", "org.yaml.snakeyaml",
"org.springframework.jndi" };
}

9
ruoyi-quartz/src/main/java/com/ruoyi/quartz/controller/SysJobController.java
View File

@ -148,6 +148,11 @@ public class SysJobController extends BaseController
{ {
return error("新增任务'" + job.getJobName() + "'失败，目标字符串不允许'http(s)//'调用"); return error("新增任务'" + job.getJobName() + "'失败，目标字符串不允许'http(s)//'调用");
} }
else if (StringUtils.containsAnyIgnoreCase(job.getInvokeTarget(), Constants.JOB_ERROR_STR))
{
return error("新增任务'" + job.getJobName() + "'失败，目标字符串存在违规");
}
job.setCreateBy(getLoginName());
return toAjax(jobService.insertJob(job)); return toAjax(jobService.insertJob(job));
} }
@ -186,6 +191,10 @@ public class SysJobController extends BaseController
{ {
return error("修改任务'" + job.getJobName() + "'失败，目标字符串不允许'http(s)//'调用"); return error("修改任务'" + job.getJobName() + "'失败，目标字符串不允许'http(s)//'调用");
} }
else if (StringUtils.containsAnyIgnoreCase(job.getInvokeTarget(), Constants.JOB_ERROR_STR))
{
return error("修改任务'" + job.getJobName() + "'失败，目标字符串存在违规");
}
return toAjax(jobService.updateJob(job)); return toAjax(jobService.updateJob(job));
} }