合并分支 'dev_third_stage' 到 'master'

修复文件任意上传windows的$$DATA文件流问题查看合并请求 laws-nio/laws-weilai!333
2023-06-08 19:44:35 +08:00
parent 6c1a0450dc aae929f6ba
commit e3684bb528
4 changed files with 4 additions and 4 deletions
@@ -220,7 +220,7 @@ public class CommonUtils {
     */
    public static boolean limitFileSuffix(String fileName,String[] fileSuffixLimits){
        final List<String> fileNameList = Arrays.asList(fileSuffixLimits);
-        boolean isExists = fileNameList.stream().anyMatch(name -> fileName.substring(0,fileName.lastIndexOf('.')).contains(name)||fileName.substring(fileName.lastIndexOf('.')).equals(name));
+        boolean isExists = fileNameList.stream().anyMatch(name -> fileName.substring(0,fileName.lastIndexOf('.')).contains(name)||fileName.substring(fileName.lastIndexOf('.')).contains(name));
        return isExists;
    }
    /**
@@ -282,7 +282,7 @@ jero :
    type: STANDALONE
    enabled: true
  # 文件限制后缀黑名单
-  fileSuffixLimits : 0x00,%00,\\00,.jsp,.exe,.php,.asp,.aspx,.jspx,.xml,.html,.js,.sh,.bin
+  fileSuffixLimits : 0x00,%00,\\00,.jsp,.exe,.php,.asp,.aspx,.jspx,.xml,.html,.js,.sh,.bin,$DATA
  # 跨站白名单
  whiteUrls:
 #cas单点登录
@@ -253,7 +253,7 @@ jero :
    type: STANDALONE
    enabled: true
  # 文件限制后缀黑名单
-  fileSuffixLimits : 0x00,%00,\\00,.jsp,.exe,.php,.asp,.aspx,.jspx,.xml,.html,.js,.sh,.bin
+  fileSuffixLimits : 0x00,%00,\\00,.jsp,.exe,.php,.asp,.aspx,.jspx,.xml,.html,.js,.sh,.bin,$DATA
  # 跨站白名单
  whiteUrls:
 #cas单点登录
@@ -257,7 +257,7 @@ jero :
    type: STANDALONE
    enabled: true
  # 文件限制后缀黑名单
-  fileSuffixLimits : 0x00,%00,\\00,.jsp,.exe,.php,.asp,.aspx,.jspx,.xml,.html,.js,.sh,.bin
+  fileSuffixLimits : 0x00,%00,\\00,.jsp,.exe,.php,.asp,.aspx,.jspx,.xml,.html,.js,.sh,.bin,$DATA
  # 跨站白名单
  whiteUrls:
 #cas单点登录