Commit 1e37f0430b93ec3f88f09870329db297b1d880ae
1 parent
29517325
定时任务屏蔽ldap远程调用
Showing
2 changed files
with
14 additions
and
1 deletions
ruoyi-common/src/main/java/com/ruoyi/common/constant/Constants.java
... | ... | @@ -68,7 +68,7 @@ public class Constants |
68 | 68 | * 登录用户 redis key |
69 | 69 | */ |
70 | 70 | public static final String LOGIN_TOKEN_KEY = "login_tokens:"; |
71 | - | |
71 | + | |
72 | 72 | /** |
73 | 73 | * 防重提交 redis key |
74 | 74 | */ |
... | ... | @@ -143,4 +143,9 @@ public class Constants |
143 | 143 | * RMI 远程方法调用 |
144 | 144 | */ |
145 | 145 | public static final String LOOKUP_RMI = "rmi://"; |
146 | + | |
147 | + /** | |
148 | + * LDAP 远程方法调用 | |
149 | + */ | |
150 | + public static final String LOOKUP_LDAP = "ldap://"; | |
146 | 151 | } |
... | ... |
ruoyi-quartz/src/main/java/com/ruoyi/quartz/controller/SysJobController.java
... | ... | @@ -88,6 +88,10 @@ public class SysJobController extends BaseController |
88 | 88 | { |
89 | 89 | return error("新增任务'" + job.getJobName() + "'失败,目标字符串不允许'rmi://'调用"); |
90 | 90 | } |
91 | + else if (StringUtils.containsIgnoreCase(job.getInvokeTarget(), Constants.LOOKUP_LDAP)) | |
92 | + { | |
93 | + return error("新增任务'" + job.getJobName() + "'失败,目标字符串不允许'ldap://'调用"); | |
94 | + } | |
91 | 95 | else if (StringUtils.containsAnyIgnoreCase(job.getInvokeTarget(), new String[] { Constants.HTTP, Constants.HTTPS })) |
92 | 96 | { |
93 | 97 | return error("新增任务'" + job.getJobName() + "'失败,目标字符串不允许'http(s)//'调用"); |
... | ... | @@ -112,6 +116,10 @@ public class SysJobController extends BaseController |
112 | 116 | { |
113 | 117 | return error("修改任务'" + job.getJobName() + "'失败,目标字符串不允许'rmi://'调用"); |
114 | 118 | } |
119 | + else if (StringUtils.containsIgnoreCase(job.getInvokeTarget(), Constants.LOOKUP_LDAP)) | |
120 | + { | |
121 | + return error("修改任务'" + job.getJobName() + "'失败,目标字符串不允许'ldap://'调用"); | |
122 | + } | |
115 | 123 | else if (StringUtils.containsAnyIgnoreCase(job.getInvokeTarget(), new String[] { Constants.HTTP, Constants.HTTPS })) |
116 | 124 | { |
117 | 125 | return error("修改任务'" + job.getJobName() + "'失败,目标字符串不允许'http(s)//'调用"); |
... | ... |