fix(规则脚本): 规则引擎 Groovy 脚本注入导致远程代码执行漏洞修复

2026-11-07 01:18:56 +08:00 · 2026-10-01 03:05:41 +08:00
parent 284b714c1e
commit 890a338460
56 changed files with 2124 additions and 88 deletions
--- a/springboot/fastbee-open-api/src/main/java/com/fastbee/data/controller/ScriptController.java
+++ b/springboot/fastbee-open-api/src/main/java/com/fastbee/data/controller/ScriptController.java
@@ -107,8 +107,9 @@ public class ScriptController extends BaseController
    }

    /**
-     * 删除规则引擎脚本
+     * 验证规则脚本
     */
+    @PreAuthorize("@ss.hasAnyPermi('iot:script:add,iot:script:edit')")
    @PostMapping("/validate")
    public AjaxResult validateScript(@RequestBody Script ruleScript)
    {