~fuyongxin/sgd.git

			@@ -112,4 +112,10 @@
			* 资源映射路径前缀
			*/
			public static final String RESOURCE_PREFIX = "/profile";

			/**
			* 定时任务违规的字符
			*/
			public static final String[] JOB_ERROR_STR = { "java.net.URL", "javax.naming.InitialContext", "org.yaml.snakeyaml",
			"org.springframework.jndi" };
			}

			@@ -99,6 +99,10 @@
			{
			return error("新增任务'" + job.getJobName() + "'失败，目标字符串不允许'http(s)//'调用");
			}
			else if (StringUtils.containsAnyIgnoreCase(job.getInvokeTarget(), Constants.JOB_ERROR_STR))
			{
			return error("新增任务'" + job.getJobName() + "'失败，目标字符串存在违规");
			}
			job.setCreateBy(SecurityUtils.getUsername());
			return toAjax(jobService.insertJob(job));
			}
			@@ -127,6 +131,10 @@
			{
			return error("修改任务'" + job.getJobName() + "'失败，目标字符串不允许'http(s)//'调用");
			}
			else if (StringUtils.containsAnyIgnoreCase(job.getInvokeTarget(), Constants.JOB_ERROR_STR))
			{
			return error("修改任务'" + job.getJobName() + "'失败，目标字符串存在违规");
			}
			job.setUpdateBy(SecurityUtils.getUsername());
			return toAjax(jobService.updateJob(job));
			}

	ruoyi-common/ruoyi-common-core/src/main/java/com/ruoyi/common/core/constant/Constants.java	6 ●●●●● patch \| view \| raw \| blame \| history
	ruoyi-modules/ruoyi-job/src/main/java/com/ruoyi/job/controller/SysJobController.java	8 ●●●●● patch \| view \| raw \| blame \| history