Commit 5e0639d0d60dd96fd33e5e9552627867639dd800

Authored by zhangdaiscott
1 parent 8ce5026d

JeecgBoot 3.1.0 版本发布,基于代码生成器的企业级低代码平台

jeecg-boot/jeecg-boot-module-system/src/main/java/org/jeecg/modules/system/controller/CommonController.java
... ... @@ -76,7 +76,7 @@ public class CommonController {
76 76 String bizPath = request.getParameter("biz");
77 77  
78 78 //LOWCOD-2580 sys/common/upload接口存在任意文件上传漏洞
79   - if(bizPath.contains("../") || bizPath.contains("..\\")){
  79 + if (oConvertUtils.isNotEmpty(bizPath) && (bizPath.contains("../") || bizPath.contains("..\\"))) {
80 80 throw new JeecgBootException("上传目录bizPath,格式非法!");
81 81 }
82 82  
... ...
jeecg-boot/jeecg-boot-module-system/src/main/java/org/jeecg/modules/system/controller/SysUploadController.java
... ... @@ -37,7 +37,7 @@ public class SysUploadController {
37 37 String bizPath = request.getParameter("biz");
38 38  
39 39 //LOWCOD-2580 sys/common/upload接口存在任意文件上传漏洞
40   - if(bizPath.contains("../") || bizPath.contains("..\\")){
  40 + if (oConvertUtils.isNotEmpty(bizPath) && (bizPath.contains("../") || bizPath.contains("..\\"))) {
41 41 throw new JeecgBootException("上传目录bizPath,格式非法!");
42 42 }
43 43  
... ...
jeecg-boot/jeecg-cloud-module/jeecg-cloud-test/jeecg-cloud-test-shardingsphere/src/main/resources/application-sharding.yml
... ... @@ -28,7 +28,7 @@ spring:
28 28 props:
29 29 strategy: standard
30 30 # 自定义标准分配算法
31   - algorithmClassName: org.jeecg.modules.demo.sharding.algorithm.StandardModTableShardAlgorithm
  31 + algorithmClassName: org.jeecg.modules.test.sharding.algorithm.StandardModTableShardAlgorithm
32 32 type: CLASS_BASED
33 33 tables:
34 34 # 逻辑表名称
... ...