Jonathan Leitschuh
|
1205c9706d
|
vuln-fix: Use HTTPS instead of HTTP to resolve deps CVE-2021-26291
This fixes a security vulnerability in this project where the `pom.xml`
files were configuring Maven to resolve dependencies over HTTP instead of
HTTPS.
Weakness: CWE-829: Inclusion of Functionality from Untrusted Control Sphere
Severity: High
CVSS: 8.1
Detection: CodeQL & OpenRewrite (https://app.moderne.io/recipes/org.openrewrite.maven.security.UseHttpsForRepositories)
Reported-by: Jonathan Leitschuh <Jonathan.Leitschuh@gmail.com>
Signed-off-by: Jonathan Leitschuh <Jonathan.Leitschuh@gmail.com>
Bug-tracker: https://github.com/JLLeitschuh/security-research/issues/8
Detection: CodeQL (https://codeql.github.com/codeql-query-help/java/java-maven-non-https-url/) & OpenRewrite (https://app.moderne.io/recipes/org.openrewrite.maven.security.UseHttpsForRepositories)
Reported-by: Jonathan Leitschuh <Jonathan.Leitschuh@gmail.com>
Signed-off-by: Jonathan Leitschuh <Jonathan.Leitschuh@gmail.com>
Bug-tracker: https://github.com/JLLeitschuh/security-research/issues/8
Use this link to re-run the recipe: https://app.moderne.io/recipes/builder/IfHkrYfxx?organizationId=QWxsIEdpdEh1Yg%3D%3D
Co-authored-by: Moderne <team@moderne.io>
|
2023-12-16 17:24:34 +00:00 |
Zheng Jie
|
2a879115bc
|
修复退出登录,提出用户,前端401死循环问题
close https://github.com/elunez/eladmin/issues/817
|
2023-10-08 14:54:34 +08:00 |
Zheng Jie
|
490a8f24c0
|
update README.md
|
2023-08-12 18:49:02 +08:00 |
Zheng Jie
|
b17873ff9d
|
update README.md
|
2023-08-12 18:48:52 +08:00 |
Zheng Jie
|
f3fb86a699
|
update eladmin.sql
|
2023-07-28 15:55:13 +08:00 |
l2063610646
|
7b52d617e5
|
fix(EmailServiceImpl): 解决由于jdk8之后默认禁用了部分tls协议,从而导致发送邮件失败的问题 (#809)
1、测试jdk版本:jdk1.8.0_351
|
2023-07-26 17:00:03 +08:00 |
Zheng Jie
|
d6cb573671
|
update README.md
|
2023-07-26 15:24:22 +08:00 |
Zheng Jie
|
61c7131343
|
update SwaggerConfig.java
close https://github.com/elunez/eladmin/issues/807
|
2023-07-12 16:21:10 +08:00 |
Zheng Jie
|
6d4a00406f
|
update eladmin.sql
close https://github.com/elunez/eladmin/issues/806
|
2023-07-11 16:36:48 +08:00 |
Zheng Jie
|
86e8af6536
|
update README.md
|
2023-07-07 18:07:14 +08:00 |
Zheng Jie
|
b03c2fd415
|
update README.md
|
2023-07-07 18:04:49 +08:00 |
Zheng Jie
|
00f7f25062
|
代码优化,避免【菜单、部门】移动节点时出现PID数据环形问题
close https://github.com/elunez/eladmin/issues/803
|
2023-07-07 17:49:10 +08:00 |
Zheng Jie
|
484785c222
|
代码优化,避免【菜单、部门】移动节点时出现PID数据环形问题
close https://github.com/elunez/eladmin/issues/803
|
2023-07-07 17:34:57 +08:00 |
Zheng Jie
|
3aab1567c4
|
update README.md
|
2023-07-07 11:06:44 +08:00 |
Zheng Jie
|
c6f579b126
|
代码优化
|
2023-07-07 10:41:03 +08:00 |
Zheng Jie
|
0f3578c9be
|
升级依赖,统一使用fastjson进行Json操作
|
2023-07-06 22:19:17 +08:00 |
Zheng Jie
|
8cb96509a0
|
统一使用fastjson进行Json操作
|
2023-07-06 20:42:05 +08:00 |
Zheng Jie
|
e0777d8681
|
新增重置用户密码功能
|
2023-07-06 14:24:37 +08:00 |
Zheng Jie
|
c20bd42276
|
update README.md
|
2023-07-06 09:47:15 +08:00 |
Zheng Jie
|
46731f23a1
|
移除 yauaa 获取UA信息,采用hutoolUA工具类-UserAgentUtil 获取浏览器信息:https://github.com/elunez/eladmin-mp/issues/5
|
2023-07-05 18:11:18 +08:00 |
Zheng Jie
|
189f671e88
|
移除 yauaa 获取UA信息,采用hutoolUA工具类-UserAgentUtil 获取浏览器信息:https://github.com/elunez/eladmin-mp/issues/5
|
2023-07-05 17:54:55 +08:00 |
Zheng Jie
|
39d480938d
|
v2.7 版本发布
|
2023-07-05 14:00:29 +08:00 |
Zheng Jie
|
c8b2cbc082
|
启用Gzip压缩
|
2023-07-05 11:55:51 +08:00 |
Zheng Jie
|
7dfe9d3148
|
代码优化,去除遗留的jackson代码
|
2023-07-05 11:36:37 +08:00 |
Zheng Jie
|
b46d50fef1
|
修复关联查询出现重复的join:https://github.com/elunez/eladmin/issues/655
close https://github.com/elunez/eladmin/issues/655
|
2023-07-05 10:22:39 +08:00 |
Zheng Jie
|
cf3655adf4
|
用户登录优化,踢出用户性能优化,在线用户查询性能优化
close https://github.com/elunez/eladmin/issues/802
|
2023-07-04 22:30:30 +08:00 |
Aborn Jiang
|
f0ed88c51e
|
support FIND_IN_SET cond (#745)
* fix weird prefixes keys when use RedisUtils.scan
* Column use `` for reserved key
ref: https://stackoverflow.com/questions/2224503/how-to-map-an-entity-field-whose-name-is-a-reserved-word-in-jpa
* add FIND_IN_SET 条件查询
* note
|
2023-07-04 17:32:22 +08:00 |
Zheng Jie
|
f72efb8044
|
RedisUtils key过期时间增加提示
close https://github.com/elunez/eladmin/issues/763
|
2023-07-04 17:14:10 +08:00 |
Zheng Jie
|
4f31a0ade8
|
修复角色机构权限bug: https://github.com/elunez/eladmin/issues/801
|
2023-07-04 16:54:59 +08:00 |
Zheng Jie
|
47345037f6
|
代码优化
|
2023-07-04 16:43:40 +08:00 |
Zheng Jie
|
22680d17f4
|
代码优化
|
2023-07-04 16:41:22 +08:00 |
Zheng Jie
|
17820dec63
|
代码优化
|
2023-07-04 16:33:52 +08:00 |
Zheng Jie
|
362353330a
|
代码优化
|
2023-06-30 14:35:28 +08:00 |
Zheng Jie
|
45cda7cf6a
|
代码优化
|
2023-06-30 14:34:44 +08:00 |
Zheng Jie
|
ca0f529323
|
代码优化
|
2023-06-30 14:34:19 +08:00 |
Zheng Jie
|
e7ef764438
|
代码优化
|
2023-06-30 14:33:14 +08:00 |
Zheng Jie
|
5b9213f25f
|
代码优化
|
2023-06-30 14:12:55 +08:00 |
Jover
|
a74cf51c0a
|
feat: 增加分页实体 APage,使 Swagger 可显示接口的响应示例 (#800)
* feat: 增加分页实体 APage,使 Swagger 可显示接口的响应示例
1. 增加类 APage,并重构 PageUtils
2. 调整 UserController 的 `查询用户` 接口的返回值类型
* refactor: rename APage -> PageResult
|
2023-06-30 13:43:45 +08:00 |
Zheng Jie
|
8ce9db9a5c
|
update README.md
|
2023-06-28 15:47:07 +08:00 |
Zheng Jie
|
59ecc33b66
|
update
|
2023-06-27 10:48:52 +08:00 |
Zheng Jie
|
4a6e6953df
|
代码结构优化
|
2023-06-27 10:07:44 +08:00 |
Zheng Jie
|
20f550d527
|
代码结构优化
|
2023-06-27 09:55:39 +08:00 |
Zheng Jie
|
d14835a4b8
|
启用响应内容压缩
|
2023-06-13 17:34:24 +08:00 |
Zheng Jie
|
4e10329c42
|
log模块代码优化
|
2023-06-12 13:35:39 +08:00 |
Zheng Jie
|
6c5e7061fe
|
代码优化
|
2023-06-11 21:27:51 +08:00 |
Zheng Jie
|
a1a00154ad
|
代码优化
|
2023-06-08 16:05:51 +08:00 |
Zheng Jie
|
21b30b1bb8
|
代码优化,自定义线程池优化
|
2023-06-08 15:56:12 +08:00 |
Zheng Jie
|
64e608b8df
|
update hutool-all version
|
2023-05-30 17:55:20 +08:00 |
Zheng Jie
|
4133e1d827
|
update README.md
|
2023-05-30 14:38:20 +08:00 |
Zheng Jie
|
f02796a740
|
update README.md
|
2023-05-26 19:48:36 +08:00 |