Browse Source

升级fastjson至2.0.57修复<=1.2.83任意代码执行漏洞,调整离线设备告警阈值

Co-Authored-By: Claude Code <noreply@anthropic.com>
master
bgy 1 week ago
parent
commit
1448146b2a
2 changed files with 4 additions and 2 deletions
  1. +3
    -1
      pom.xml
  2. +1
    -1
      src/main/java/com/topsail/scheduletask/task/CheckRabbitMqScheduleTask.java

+ 3
- 1
pom.xml View File

@ -70,10 +70,12 @@
<version>${hutool.version}</version>
</dependency>
<!-- fastjson 2.x 兼容包:保留 com.alibaba.fastjson 包名,底层为 fastjson2,
默认关闭 autoType,修复 fastjson <= 1.2.83 任意代码执行漏洞 -->
<dependency>
<groupId>com.alibaba</groupId>
<artifactId>fastjson</artifactId>
<version>1.2.83</version>
<version>2.0.57</version>
</dependency>
<dependency>


+ 1
- 1
src/main/java/com/topsail/scheduletask/task/CheckRabbitMqScheduleTask.java View File

@ -126,7 +126,7 @@ public class CheckRabbitMqScheduleTask {
}
//2.查询设备离线数量
List<DeviceOnlineInfo> offlineDevices = topsailTransmitLogDao.getOfflineDevice(imeiList, focusDeviceOnline.getProjectId());
if (offlineDevices != null && offlineDevices.size() > 0) {
if (offlineDevices != null && offlineDevices.size() > 2) {
//将离线的设备号码转成json字符串
Map<String, String> offlineDeviceMap = offlineDevices.stream()
.collect(Collectors.toMap(DeviceOnlineInfo::getImei, DeviceOnlineInfo::getOfflineTime));


Loading…
Cancel
Save