From 9502203bbee72439c8f54aa692958f443a2ceeeb Mon Sep 17 00:00:00 2001 From: 若依 <yzz_ivy@163.com> Date: 星期日, 14 三月 2021 16:32:07 +0800 Subject: [PATCH] !187 【漏洞修复】升级commons-collections版本,解决3.2.1版本的反序列化漏洞问题 Merge pull request !187 from Delusive/master --- ruoyi-framework/src/main/java/com/ruoyi/framework/aspectj/LogAspect.java | 3 ++- 1 files changed, 2 insertions(+), 1 deletions(-) diff --git a/ruoyi-framework/src/main/java/com/ruoyi/framework/aspectj/LogAspect.java b/ruoyi-framework/src/main/java/com/ruoyi/framework/aspectj/LogAspect.java index c11a477..4f3de4a 100644 --- a/ruoyi-framework/src/main/java/com/ruoyi/framework/aspectj/LogAspect.java +++ b/ruoyi-framework/src/main/java/com/ruoyi/framework/aspectj/LogAspect.java @@ -212,6 +212,7 @@ * @param o 对象信息。 * @return 如果是需要过滤的对象,则返回true;否则返回false。 */ + @SuppressWarnings("rawtypes") public boolean isFilterObject(final Object o) { Class<?> clazz = o.getClass(); @@ -230,7 +231,7 @@ else if (Map.class.isAssignableFrom(clazz)) { Map map = (Map) o; - for (Iterator iter = map.entrySet().iterator(); iter.hasNext(); ) + for (Iterator iter = map.entrySet().iterator(); iter.hasNext();) { Map.Entry entry = (Map.Entry) iter.next(); return entry.getValue() instanceof MultipartFile; -- Gitblit v1.9.2