Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

fix jmx custom url cause deserialization vulnerability #1611

Merged
merged 5 commits into from
Mar 5, 2024
Merged

fix jmx custom url cause deserialization vulnerability #1611

merged 5 commits into from
Mar 5, 2024

Conversation

tomsun28
Copy link
Contributor

@tomsun28 tomsun28 commented Mar 5, 2024

What's changed?

Checklist

  • I hereby agree to the terms of the HertzBeat CLA
  • I have read the Contributing Guide
  • I have written the necessary doc or comment.
  • I have added the necessary unit tests and all cases have passed.

Add or update API

  • I have added the necessary e2e tests and all cases have passed.

@dosubot dosubot bot added the size:M This PR changes 30-99 lines, ignoring generated files. label Mar 5, 2024
@tomsun28 tomsun28 requested a review from zqr10159 March 5, 2024 06:46
@tomsun28 tomsun28 added this to the 1.5.1 milestone Mar 5, 2024
@tomsun28 tomsun28 added the bugfix label Mar 5, 2024
@tomsun28
disable export yaml
1e49d8f 
Signed-off-by: tomsun28 <[email protected]>
@dosubot dosubot bot added the lgtm This PR has been approved by a maintainer label Mar 5, 2024
@zqr10159 zqr10159 merged commit 3a5bb24 into master Mar 5, 2024
2 checks passed
@zqr10159 zqr10159 deleted the bugfix#yaml branch March 5, 2024 08:12
tomsun28 added a commit that referenced this pull request Mar 9, 2024
@tomsun28
fix jmx custom url cause deserialization vulnerability (#1611)
3607fa6 
Signed-off-by: tomsun28 <[email protected]>
tomsun28 added a commit that referenced this pull request Mar 9, 2024
@tomsun28
fix jmx custom url cause deserialization vulnerability (#1611)
e0ac094 
Signed-off-by: tomsun28 <[email protected]>
tomsun28 added a commit that referenced this pull request Mar 9, 2024
@tomsun28
fix jmx custom url cause deserialization vulnerability (#1611)
6944344 
Signed-off-by: tomsun28 <[email protected]>
tomsun28 added a commit that referenced this pull request Mar 10, 2024
@tomsun28
fix jmx custom url cause deserialization vulnerability (#1611)
9824e89 
Signed-off-by: tomsun28 <[email protected]>
tomsun28 added a commit that referenced this pull request Mar 10, 2024
@tomsun28
fix jmx custom url cause deserialization vulnerability (#1611)
9ed8109 
Signed-off-by: tomsun28 <[email protected]>
tomsun28 added a commit that referenced this pull request Mar 11, 2024
@tomsun28
fix jmx custom url cause deserialization vulnerability (#1611)
e6a366d 
Signed-off-by: tomsun28 <[email protected]>
tomsun28 added a commit that referenced this pull request Mar 11, 2024
@tomsun28
fix jmx custom url cause deserialization vulnerability (#1611)
10d70e0 
Signed-off-by: tomsun28 <[email protected]>
tomsun28 added a commit that referenced this pull request Mar 11, 2024
@tomsun28
fix jmx custom url cause deserialization vulnerability (#1611)
83bad38 
Signed-off-by: tomsun28 <[email protected]>
tomsun28 added a commit that referenced this pull request Mar 11, 2024
@tomsun28
fix jmx custom url cause deserialization vulnerability (#1611)
79f5408 
Signed-off-by: tomsun28 <[email protected]>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers

@zqr10159 zqr10159 zqr10159 approved these changes

@TJxiaobao TJxiaobao Awaiting requested review from TJxiaobao

@a-little-fool a-little-fool Awaiting requested review from a-little-fool

Assignees
No one assigned
Labels
bugfix lgtm This PR has been approved by a maintainer size:M This PR changes 30-99 lines, ignoring generated files.
Projects
None yet
Milestone
1.6.0
Development

Successfully merging this pull request may close these issues.
2 participants
@tomsun28 @zqr10159