1. 04 Jul, 2023 3 commits
  2. 30 Jun, 2023 3 commits
  3. 11 Jun, 2023 1 commit
  4. 17 Apr, 2023 1 commit
  5. 23 Mar, 2023 1 commit
  6. 02 Aug, 2022 1 commit
  7. 10 Jun, 2022 1 commit
    • Zheng Jie's avatar
      [Bug修复](master): 修复定时任务管理存在SQL注入漏洞问题 · 2dc528a1
      Zheng Jie authored
      由于定时任务未对Bean进行过滤,导致攻击者可以从SpringContextHolder获得控制jdbcTemplate类,并使用getDeclaredMethod调用jdbcTemplate的queryForMap函数,从而执行任意sql命令。
      
      修复后定时任务的 Bean 需要使用 @Service 注解定义。
      2dc528a1
  8. 25 May, 2022 2 commits
  9. 20 May, 2022 1 commit
  10. 18 Mar, 2022 4 commits
  11. 14 Mar, 2022 1 commit
  12. 04 Mar, 2022 1 commit
  13. 22 Nov, 2021 1 commit
  14. 16 Nov, 2021 1 commit
  15. 27 Apr, 2021 1 commit
  16. 25 Apr, 2021 1 commit
  17. 20 Mar, 2021 1 commit
  18. 05 Mar, 2021 1 commit
  19. 02 Mar, 2021 1 commit
  20. 31 Jan, 2021 1 commit
  21. 17 Jan, 2021 1 commit
  22. 21 Dec, 2020 1 commit
  23. 13 Dec, 2020 1 commit
  24. 12 Dec, 2020 1 commit
  25. 22 Nov, 2020 1 commit
  26. 15 Nov, 2020 2 commits
  27. 08 Nov, 2020 1 commit
  28. 13 Oct, 2020 1 commit
  29. 05 Sep, 2020 1 commit
  30. 02 Aug, 2020 1 commit
  31. 12 Jul, 2020 1 commit