定时任务目标字符串验证包名白名单
This commit is contained in:
		| @@ -149,9 +149,19 @@ public class Constants | ||||
|      */ | ||||
|     public static final String LOOKUP_LDAP = "ldap:"; | ||||
|  | ||||
|     /** | ||||
|      * LDAPS 远程方法调用 | ||||
|      */ | ||||
|     public static final String LOOKUP_LDAPS = "ldaps:"; | ||||
|  | ||||
|     /** | ||||
|      * 定时任务白名单配置(仅允许访问的包名,如其他需要可以自行添加) | ||||
|      */ | ||||
|     public static final String[] JOB_WHITELIST_STR = { "com.ruoyi" }; | ||||
|  | ||||
|     /** | ||||
|      * 定时任务违规的字符 | ||||
|      */ | ||||
|     public static final String[] JOB_ERROR_STR = { "java.net.URL", "javax.naming.InitialContext", "org.yaml.snakeyaml", | ||||
|             "org.springframework" }; | ||||
| } | ||||
|             "org.springframework", "org.apache" }; | ||||
| } | ||||
|   | ||||
		Reference in New Issue
	
	Block a user