定时任务屏蔽ldap远程调用

RuoYi

2021-08-19 22c22c424633cdac64908c150db1f412f766daf5

 ruoyi-modules/ruoyi-job/src/main/java/com/ruoyi/job/controller/SysJobController.java

@@ -13,7 +13,10 @@
import org.springframework.web.bind.annotation.RequestBody;

import org.springframework.web.bind.annotation.RequestMapping;

import org.springframework.web.bind.annotation.RestController;

import com.ruoyi.common.core.constant.Constants;

import com.ruoyi.common.core.exception.job.TaskException;

import com.ruoyi.common.core.utils.SecurityUtils;

import com.ruoyi.common.core.utils.StringUtils;

import com.ruoyi.common.core.utils.poi.ExcelUtil;

import com.ruoyi.common.core.web.controller.BaseController;

import com.ruoyi.common.core.web.domain.AjaxResult;

@@ -21,7 +24,6 @@
import com.ruoyi.common.log.annotation.Log;

import com.ruoyi.common.log.enums.BusinessType;

import com.ruoyi.common.security.annotation.PreAuthorize;

import com.ruoyi.common.security.utils.SecurityUtils;

import com.ruoyi.job.domain.SysJob;

import com.ruoyi.job.service.ISysJobService;

import com.ruoyi.job.util.CronUtils;

@@ -79,14 +81,26 @@
    @PreAuthorize(hasPermi = "monitor:job:add")

    @Log(title = "定时任务", businessType = BusinessType.INSERT)

    @PostMapping

    public AjaxResult add(@RequestBody SysJob sysJob) throws SchedulerException, TaskException

    public AjaxResult add(@RequestBody SysJob job) throws SchedulerException, TaskException

    {

        if (!CronUtils.isValid(sysJob.getCronExpression()))

        if (!CronUtils.isValid(job.getCronExpression()))

        {

            return AjaxResult.error("cron表达式不正确");

            return error("新增任务'" + job.getJobName() + "'失败，Cron表达式不正确");

        }

        sysJob.setCreateBy(SecurityUtils.getUsername());

        return toAjax(jobService.insertJob(sysJob));

        else if (StringUtils.containsIgnoreCase(job.getInvokeTarget(), Constants.LOOKUP_RMI))

        {

            return error("新增任务'" + job.getJobName() + "'失败，目标字符串不允许'rmi://'调用");

        }

        else if (StringUtils.containsIgnoreCase(job.getInvokeTarget(), Constants.LOOKUP_LDAP))

        {

            return error("新增任务'" + job.getJobName() + "'失败，目标字符串不允许'ldap://'调用");

        }

        else if (StringUtils.containsAnyIgnoreCase(job.getInvokeTarget(), new String[] { Constants.HTTP, Constants.HTTPS }))

        {

            return error("新增任务'" + job.getJobName() + "'失败，目标字符串不允许'http(s)//'调用");

        }

        job.setCreateBy(SecurityUtils.getUsername());

        return toAjax(jobService.insertJob(job));

    }



    /**

@@ -95,14 +109,26 @@
    @PreAuthorize(hasPermi = "monitor:job:edit")

    @Log(title = "定时任务", businessType = BusinessType.UPDATE)

    @PutMapping

    public AjaxResult edit(@RequestBody SysJob sysJob) throws SchedulerException, TaskException

    public AjaxResult edit(@RequestBody SysJob job) throws SchedulerException, TaskException

    {

        if (!CronUtils.isValid(sysJob.getCronExpression()))

        if (!CronUtils.isValid(job.getCronExpression()))

        {

            return AjaxResult.error("cron表达式不正确");

            return error("修改任务'" + job.getJobName() + "'失败，Cron表达式不正确");

        }

        sysJob.setUpdateBy(SecurityUtils.getUsername());

        return toAjax(jobService.updateJob(sysJob));

        else if (StringUtils.containsIgnoreCase(job.getInvokeTarget(), Constants.LOOKUP_RMI))

        {

            return error("修改任务'" + job.getJobName() + "'失败，目标字符串不允许'rmi://'调用");

        }

        else if (StringUtils.containsIgnoreCase(job.getInvokeTarget(), Constants.LOOKUP_LDAP))

        {

            return error("修改任务'" + job.getJobName() + "'失败，目标字符串不允许'ldap://'调用");

        }

        else if (StringUtils.containsAnyIgnoreCase(job.getInvokeTarget(), new String[] { Constants.HTTP, Constants.HTTPS }))

        {

            return error("修改任务'" + job.getJobName() + "'失败，目标字符串不允许'http(s)//'调用");

        }

        job.setUpdateBy(SecurityUtils.getUsername());

        return toAjax(jobService.updateJob(job));

    }



    /**