1974 Commits

Author SHA1 Message Date
MaxKey
70a843b112 Provisioning 优化 2023-01-05 09:54:41 +08:00
MaxKey
d68787d647 JdbcSynchronizer 优化 2023-01-04 11:11:53 +08:00
MaxKey
7fb7f30edc add License 2023-01-03 15:35:53 +08:00
MaxKey
49d5008d79 修复sms配置显示问题 2023-01-03 15:31:00 +08:00
MaxKey
f4e36ad0da split maxkey-authentication-sms 2023-01-03 15:08:07 +08:00
MaxKey
46a57a1a9d Update NOTICE 2022-12-31 17:04:30 +08:00
MaxKey
8ea109aaeb Update application.properties 2022-12-29 19:03:11 +08:00
MaxKey
a2324aa488 rename properties name 2022-12-29 18:59:55 +08:00
MaxKey
84138ddcfe 3.5.12 release_frontend_docker 3.5.12 2022-12-26 16:37:36 +08:00
MaxKey
2f0223dba1 Update README_zh.md 2022-12-26 10:58:14 +08:00
MaxKey
1273f4033b 3.5.12 readme 2022-12-26 10:56:45 +08:00
MaxKey
be965de799 3.5.12 SQL 2022-12-26 10:13:11 +08:00
MaxKey
8213ffb8a0 remove old message 2022-12-25 16:54:29 +08:00
MaxKey
fbca926ad1 ReleaseNotes 3.5.12 2022-12-25 11:48:53 +08:00
MaxKey
e6f065764f 3.5.12 2022-12-25 11:28:36 +08:00
MaxKey
d604b45155 readme 2022-12-24 10:08:34 +08:00
MaxKey
d8919beea0 springBoot 2.7.7
springBootVersion               2.7.7
httpcomponentsVersion           4.5.14
httpcoreVersion                 4.4.16
2022-12-24 09:44:30 +08:00
MaxKey
f0530a5ba5 tomcat 9.0.70 2022-12-23 10:30:52 +08:00
MaxKey
91ff7c83ff springSecurity 5.7.6 2022-12-23 09:15:31 +08:00
MaxKey
747aa70225 apps sortindex 2022-12-22 09:54:43 +08:00
shibanglin
c20c79f3f4 用户批量删除 onBatchDelete 调用的后端 delete 2022-12-21 11:03:07 +08:00
MaxKey
9e96f43c00 #I66S79 CAS退出跳转报错问题 2022-12-20 16:10:53 +08:00
MaxKey
f84e1d5607 mgt logout invalidate http Session 2022-12-19 11:40:53 +08:00
MaxKey
91514cce7e v3.5.11 SQL 3.5.11 2022-12-14 17:02:08 +08:00
MaxKey
0635cd9b43 3.5.11 readme 2022-12-14 15:49:36 +08:00
MaxKey
7a4b035872 3.5.11 version 2022-12-14 09:22:57 +08:00
MaxKey
63c011ee56 去除后端管理cookie的设置 2022-12-14 08:50:24 +08:00
MaxKey
b5e4858608 Update layout-nav.component.ts 2022-12-13 18:00:53 +08:00
MaxKey
a756c20030 ReleaseNotes 3.5.11 2022-12-12 16:04:44 +08:00
MaxKey
99f249b1b7 ReleaseNotes 3.5.11 2022-12-12 14:26:03 +08:00
MaxKey
e20ed13dcd Update README_zh.md 2022-12-12 10:42:28 +08:00
MaxKey
ff0f6fc1f3 user personal
education,graduateFrom
2022-12-11 15:42:26 +08:00
MaxKey
5e1d560fc6 readme 2022-12-07 11:17:52 +08:00
MaxKey
da29ab7e63 readme 2022-12-07 11:14:21 +08:00
MaxKey
be31e37aeb 3.5.11 2022-12-06 20:36:59 +08:00
MaxKey
7367666adc synchronizer jdbc & optimize 2022-12-04 18:37:38 +08:00
MaxKey
823383d95f SQL type 2022-12-03 17:27:09 +08:00
MaxKey
cf747db73b BadPasswordCount 次数问题 2022-12-03 15:52:31 +08:00
MaxKey
b462b7f3aa log trace 2022-12-01 18:59:50 +08:00
MaxKey
8bcb4c753a springBoot 2.7.6 2022-11-27 17:30:45 +08:00
MaxKey
dfa90f63ed Update release_frontend_docker.bat 2022-11-23 11:48:39 +08:00
MaxKey
14d1626d89 v3.5.10 README v3.5.10 2022-11-23 08:50:03 +08:00
MaxKey
02183f9c8c v3.5.10 SQL 2022-11-23 08:49:54 +08:00
MaxKey
3bbe7f2cb0 #I62KF2 mysqlconnectorjavaVersion =8.0.31 是这个版本编译报错的 换个其他版本就行 2022-11-22 22:32:02 +08:00
MaxKey
f2295ab1f0 v3.5.10 ReleaseNotes 2022-11-22 11:03:51 +08:00
MaxKey
b9e8a6c09d jars update 2022-11-22 11:02:52 +08:00
MaxKey
1f86fb4a74
Merge pull request #94 from BulkSecurityGeneratorProjectV2/fix/JLL/temporary_file_local_information_disclosure
[SECURITY] Fix Temporary File Information Disclosure Vulnerability
2022-11-21 21:08:15 +08:00
Jonathan Leitschuh
5112a787ad
vuln-fix: Temporary File Information Disclosure
This fixes temporary file information disclosure vulnerability due to the use
of the vulnerable `File.createTempFile()` method. The vulnerability is fixed by
using the `Files.createTempFile()` method which sets the correct posix permissions.

Weakness: CWE-377: Insecure Temporary File
Severity: Medium
CVSSS: 5.5
Detection: CodeQL & OpenRewrite (https://public.moderne.io/recipes/org.openrewrite.java.security.SecureTempFileCreation)

Reported-by: Jonathan Leitschuh <Jonathan.Leitschuh@gmail.com>
Signed-off-by: Jonathan Leitschuh <Jonathan.Leitschuh@gmail.com>

Bug-tracker: https://github.com/JLLeitschuh/security-research/issues/18


Co-authored-by: Moderne <team@moderne.io>
2022-11-19 02:04:21 +00:00
MaxKey
a9e040a6d7 v3.5.10 ReleaseNotes 2022-11-18 15:30:41 +08:00
MaxKey
abe95a82b6 v3.5.10 2022-11-18 15:30:00 +08:00