Commit 1e37f0430b93ec3f88f09870329db297b1d880ae

Authored by RuoYi
1 parent 29517325

定时任务屏蔽ldap远程调用

ruoyi-common/src/main/java/com/ruoyi/common/constant/Constants.java
... ... @@ -68,7 +68,7 @@ public class Constants
68 68 * 登录用户 redis key
69 69 */
70 70 public static final String LOGIN_TOKEN_KEY = "login_tokens:";
71   -
  71 +
72 72 /**
73 73 * 防重提交 redis key
74 74 */
... ... @@ -143,4 +143,9 @@ public class Constants
143 143 * RMI 远程方法调用
144 144 */
145 145 public static final String LOOKUP_RMI = "rmi://";
  146 +
  147 + /**
  148 + * LDAP 远程方法调用
  149 + */
  150 + public static final String LOOKUP_LDAP = "ldap://";
146 151 }
... ...
ruoyi-quartz/src/main/java/com/ruoyi/quartz/controller/SysJobController.java
... ... @@ -88,6 +88,10 @@ public class SysJobController extends BaseController
88 88 {
89 89 return error("新增任务'" + job.getJobName() + "'失败,目标字符串不允许'rmi://'调用");
90 90 }
  91 + else if (StringUtils.containsIgnoreCase(job.getInvokeTarget(), Constants.LOOKUP_LDAP))
  92 + {
  93 + return error("新增任务'" + job.getJobName() + "'失败,目标字符串不允许'ldap://'调用");
  94 + }
91 95 else if (StringUtils.containsAnyIgnoreCase(job.getInvokeTarget(), new String[] { Constants.HTTP, Constants.HTTPS }))
92 96 {
93 97 return error("新增任务'" + job.getJobName() + "'失败,目标字符串不允许'http(s)//'调用");
... ... @@ -112,6 +116,10 @@ public class SysJobController extends BaseController
112 116 {
113 117 return error("修改任务'" + job.getJobName() + "'失败,目标字符串不允许'rmi://'调用");
114 118 }
  119 + else if (StringUtils.containsIgnoreCase(job.getInvokeTarget(), Constants.LOOKUP_LDAP))
  120 + {
  121 + return error("修改任务'" + job.getJobName() + "'失败,目标字符串不允许'ldap://'调用");
  122 + }
115 123 else if (StringUtils.containsAnyIgnoreCase(job.getInvokeTarget(), new String[] { Constants.HTTP, Constants.HTTPS }))
116 124 {
117 125 return error("修改任务'" + job.getJobName() + "'失败,目标字符串不允许'http(s)//'调用");
... ...