Pre Merge pull request !324 from 李家栋/N/A

!397 修复actuator暴漏问题
Merge pull request !397 from 威士忌的纯度/N/A
2026-01-26 11:51:55 +08:00 · 2025-03-10 03:45:47 +00:00 · 2025-03-10 03:45:34 +00:00 · 2025-03-07 10:22:52 +00:00 · 2023-04-28 06:22:54 +00:00
2 changed files with 3 additions and 2 deletions
--- a/docker/nginx/conf/nginx.conf
+++ b/docker/nginx/conf/nginx.conf
@@ -29,7 +29,7 @@ http {
        }

        # 避免actuator暴露
-        if ($request_uri ~ "/actuator") {
+        if ($uri ~ "/actuator") {
            return 403;
        }

--- a/ruoyi-modules/ruoyi-job/src/main/java/com/ruoyi/job/util/JobInvokeUtil.java
+++ b/ruoyi-modules/ruoyi-job/src/main/java/com/ruoyi/job/util/JobInvokeUtil.java
@@ -70,7 +70,8 @@ public class JobInvokeUtil
     */
    public static boolean isValidClassName(String invokeTarget)
    {
-        return StringUtils.countMatches(invokeTarget, ".") > 1;
+        String beanName = StringUtils.substringBefore(invokeTarget, "(");
+        return Pattern.matches("(\\w+\\.){2,}\\w+", beanName);
    }

    /**
Author	SHA1	Message	Date
李家栋	dccde19433	Pre Merge pull request !324 from 李家栋/N/A	2025-03-10 03:45:47 +00:00
若依	a6bcebb62b	!397 修复actuator暴漏问题 Merge pull request !397 from 威士忌的纯度/N/A	2025-03-10 03:45:34 +00:00
威士忌的纯度	1cb262daa3	修复actuator暴漏问题 Signed-off-by: 威士忌的纯度 <whr888888@vip.qq.com>	2025-03-07 10:22:52 +00:00
李家栋	990f749912	job中校验class包名优化 Signed-off-by: 李家栋 <d06f6e67@aliyun.com>	2023-04-28 06:22:54 +00:00