WL/laws_weilai
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

合并分支 'dev_third_stage' 到 'master'

Browse Source 
修复文件任意上传windows的$$DATA文件流问题

查看合并请求 laws-nio/laws-weilai!333
This commit is contained in:
高嵩
2023-06-08 19:44:35 +08:00
parent 6c1a0450dc aae929f6ba
commit e3684bb528
4 changed files with 4 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files
jero-boot/jero-boot-base/jero-boot-base-core/src/main/java/com/jero/common/util/CommonUtils.java
+1 -1
View File
@@ -220,7 +220,7 @@ public class CommonUtils {
*/ */
public static boolean limitFileSuffix(String fileName,String[] fileSuffixLimits){ public static boolean limitFileSuffix(String fileName,String[] fileSuffixLimits){
final List<String> fileNameList = Arrays.asList(fileSuffixLimits); final List<String> fileNameList = Arrays.asList(fileSuffixLimits);
boolean isExists = fileNameList.stream().anyMatch(name -> fileName.substring(0,fileName.lastIndexOf('.')).contains(name)||fileName.substring(fileName.lastIndexOf('.')).equals(name)); boolean isExists = fileNameList.stream().anyMatch(name -> fileName.substring(0,fileName.lastIndexOf('.')).contains(name)||fileName.substring(fileName.lastIndexOf('.')).contains(name));
return isExists; return isExists;
} }
/** /**
jero-boot/jero-boot-single-startup/src/main/resources/application-dev.yml
+1 -1
View File
@@ -282,7 +282,7 @@ jero :
type: STANDALONE type: STANDALONE
enabled: true enabled: true
# 文件限制后缀黑名单 # 文件限制后缀黑名单
fileSuffixLimits : 0x00,%00,\\00,.jsp,.exe,.php,.asp,.aspx,.jspx,.xml,.html,.js,.sh,.bin fileSuffixLimits : 0x00,%00,\\00,.jsp,.exe,.php,.asp,.aspx,.jspx,.xml,.html,.js,.sh,.bin,$DATA
# 跨站白名单 # 跨站白名单
whiteUrls: whiteUrls:
#cas单点登录 #cas单点登录
jero-boot/jero-boot-single-startup/src/main/resources/application-prod.yml
+1 -1
View File
@@ -253,7 +253,7 @@ jero :
type: STANDALONE type: STANDALONE
enabled: true enabled: true
# 文件限制后缀黑名单 # 文件限制后缀黑名单
fileSuffixLimits : 0x00,%00,\\00,.jsp,.exe,.php,.asp,.aspx,.jspx,.xml,.html,.js,.sh,.bin fileSuffixLimits : 0x00,%00,\\00,.jsp,.exe,.php,.asp,.aspx,.jspx,.xml,.html,.js,.sh,.bin,$DATA
# 跨站白名单 # 跨站白名单
whiteUrls: whiteUrls:
#cas单点登录 #cas单点登录
jero-boot/jero-boot-single-startup/src/main/resources/application-test.yml
+1 -1
View File
@@ -257,7 +257,7 @@ jero :
type: STANDALONE type: STANDALONE
enabled: true enabled: true
# 文件限制后缀黑名单 # 文件限制后缀黑名单
fileSuffixLimits : 0x00,%00,\\00,.jsp,.exe,.php,.asp,.aspx,.jspx,.xml,.html,.js,.sh,.bin fileSuffixLimits : 0x00,%00,\\00,.jsp,.exe,.php,.asp,.aspx,.jspx,.xml,.html,.js,.sh,.bin,$DATA
# 跨站白名单 # 跨站白名单
whiteUrls: whiteUrls:
#cas单点登录 #cas单点登录