mirror of
https://github.com/dataease/dataease.git
synced 2026-05-16 14:31:00 +08:00
fix: 安全漏洞-社区版权限绕过 H2 RCE Bypass
This commit is contained in:
committed by
fit2cloud-chenyw
parent
2999de9fe1
commit
429f654733
@@ -61,6 +61,7 @@ public class CommunityTokenFilter implements Filter {
|
||||
String msg = URLEncoder.encode(e.getMessage(), StandardCharsets.UTF_8).replace("+", "%20");
|
||||
headers.add(headName, msg);
|
||||
sendResponseEntity(res, new ResponseEntity<>(e.getMessage(), headers, HttpStatus.UNAUTHORIZED));
|
||||
return;
|
||||
}
|
||||
}
|
||||
|
||||
|
||||
Reference in New Issue
Block a user