zhangdaiscott
|
87677df925
|
升级积木报表1.6.2-GA3,解决严重SQL漏洞
|
2 years ago |
zhangdaiscott
|
56e81fbf7b
|
升级积木报表1.6.2-GA,解决严重SQL漏洞
|
2 years ago |
zhangdaiscott
|
473875a9d2
|
--重构表字典逻辑,深度解决SQL注入漏洞问题(修复导致的bug修复)--
|
2 years ago |
zhangdaiscott
|
44952c79c2
|
---重构表字典逻辑,深度解决SQL注入漏洞问题,新旧版本都可以参考此修改合并---
(重点针对表名和字段进行单独check处理,更严格的格式要求,可能会导致一些特殊字典用法出问题,请根据自己业务做灵活调整)
org\jeecg\common\exception\JeecgSqlInjectionException.java(+)
org\jeecg\common\exception\JeecgBootExceptionHandler.java
org\jeecg\common\util\security\AbstractQueryBlackListHandler.java
org\jeecg\common\util\SqlInjectionUtil.java
org\jeecg\modules\system\controller\DuplicateCheckController.java
org\jeecg\modules\system\mapper\xml\SysDictMapper.xml
org\jeecg\modules\system\mapper\SysDictMapper.java
org\jeecg\modules\system\service\impl\SysDictServiceImpl.java
org\jeecg\modules\system\service\ISysDictService.java
|
2 years ago |
zhangdaiscott
|
58aebdbba4
|
调整版本号准备发版
|
2 years ago |
zhangdaiscott
|
2411d85af4
|
Merge branch 'master' of https://github.com/zhangdaiscott/jeecg-boot
|
2 years ago |
zhangdaiscott
|
572ea6dd69
|
Mono示例
|
2 years ago |
JEECG
|
6e417a22ba
|
Merge pull request #5328 from EightMonth/master
issue#5295 issue#5296 issue#5255
|
2 years ago |
kezhijie
|
3478e8f7bc
|
issue#5295 issue#5296 issue#5255
|
2 years ago |
zhangdaiscott
|
f9982a9132
|
【误删接口恢复】用户配置多租户后,登录后点击切换部门按钮,报错 #5298
|
2 years ago |
zhangdaiscott
|
d3238205e1
|
jeecg存在权限提升漏洞,可直接获得管理员权限 #5270
|
2 years ago |
zhangdaiscott
|
ff083361d4
|
放开系统权限控制,@RequiresPermissions,解决不安全的问题
jeecg存在权限提升漏洞,可直接获得管理员权限 #5270
|
2 years ago |
zhangdaiscott
|
9c038a979d
|
时间盲注SQL注入绕过 #5269
|
2 years ago |
zhangdaiscott
|
d36caf8c69
|
SQL注入 #5173
|
2 years ago |
zhangdaiscott
|
e6bd2d5009
|
升级druid
|
2 years ago |
zhangdaiscott
|
baf4b96b3f
|
【漏洞处理】freemarker模板注入漏洞——升级仪表盘
|
2 years ago |
zhangdaiscott
|
acb48179ab
|
【漏洞处理】freemarker模板注入问题 禁止解析ObjectConstructor,Execute
(提示:部分依赖尚未上传maven官仓,依赖下载失败请配置jeecg私服)
|
2 years ago |
zhangdaiscott
|
20889e8724
|
【issues/4393】解决使用参数tableName=sys_user t&复测,漏洞仍然存在
|
2 years ago |
zhangdaiscott
|
751b81c7bf
|
【issues/4393】解决使用参数tableName=sys_user t&复测,漏洞仍然存在
|
2 years ago |
zhangdaiscott
|
0bc7e0967d
|
【issues/4393】解决使用参数tableName=sys_user t&复测,漏洞仍然存在
|
2 years ago |
zhangdaiscott
|
05181754bb
|
签名失败
|
2 years ago |
zhangdaiscott
|
5ab62d5d3b
|
解决Apache Shiro高危漏洞编号:CVE-2023-34478
|
2 years ago |
zhangdaiscott
|
83d96bf89e
|
JeecgBoot 低代码平台 3.5.3 版本发布,Online 功能专题升级
|
2 years ago |
zhangdaiscott
|
0b2c966a72
|
README 更新
|
2 years ago |
zhangdaiscott
|
ffda530daa
|
README 更新
|
2 years ago |
zhangdaiscott
|
4c0641f374
|
README 更新
|
2 years ago |
zhangdaiscott
|
54c7c034a4
|
JeecgBoot 低代码平台 3.5.3 版本发布,Online 功能专题升级
|
2 years ago |
zhangdaiscott
|
7167668c2a
|
JeecgBoot 低代码平台 3.5.3 版本发布,Online 功能专题升级
|
2 years ago |
zhangdaiscott
|
1a722fcb07
|
Online功能专题升级,升级到3.5.3版本
|
2 years ago |
zhangdaiscott
|
648e66d5ef
|
SQL注入 #5173
|
2 years ago |
zhangdaiscott
|
e6e6902e85
|
[issues/5134] duplicate/check Sql泄露问题
|
2 years ago |
zhangdaiscott
|
04dd6b056f
|
Token有效期改为7天
|
2 years ago |
zhangdaiscott
|
96b3ba6e9a
|
nacos支持开启鉴权的配置
|
2 years ago |
zhangdaiscott
|
8d22362fff
|
升级jimureport依赖,修复两个安全漏洞问题
|
2 years ago |
zhangdaiscott
|
436bfbced9
|
升级Nacos 至 2.2.3 版本解决 raft 漏洞问题
|
2 years ago |
zhangdaiscott
|
5273b81f94
|
【issues/5115】因swagger文档导致gateway内存溢出
|
2 years ago |
zhangdaiscott
|
6134db4984
|
开源协议补充
|
2 years ago |
zhangdaiscott
|
6e7d9e8e5d
|
开源协议补充
|
2 years ago |
zhangdaiscott
|
741dc958f1
|
升级3.5.2的数据库
|
2 years ago |
zhangdaiscott
|
101ffd91af
|
升级版本号3.5.2
|
2 years ago |
zhangdaiscott
|
cecbc3f628
|
JeecgBoot仪表盘版本发布,重磅新功能!支持在线拖拽设计大屏和门户
|
2 years ago |
zhangdaiscott
|
dd7bf104e7
|
issues/4983 SQL Injection in 3.5.1 #4983
|
2 years ago |
zhangdaiscott
|
6e85584c43
|
【issues/4986】model增加hideTab字段
|
2 years ago |
zhangdaiscott
|
c579dbb24d
|
升级积木报表版本号、修改readme
|
2 years ago |
zhangdaiscott
|
452132ca38
|
变更新文档地址
|
2 years ago |
zhangdaiscott
|
ebc396340e
|
issues/4905 表单生成器字段配置时,选择关联字段,在进行高级配置时,无法加载数据库列表,提示 Sgin签名校验错误! #4905
|
2 years ago |
zhangdaiscott
|
5946aa79c3
|
[issues/4829]访问不存在的url时会提示Token失效,请重新登录呢
|
2 years ago |
zhangdaiscott
|
2bc20aaa5e
|
minio的yml文档配置失效,应该将prefix 改为·jeecg.minio·
|
2 years ago |
zhangdaiscott
|
793295a8fe
|
Seata示例启动不了 #4748
|
2 years ago |
zhangdaiscott
|
eaf3e32fdd
|
---author:scott---date:2023-05-10---for:yml属性为空导致项目启动报错,改造后支持单体非system独立启动---
|
2 years ago |